276247 - unsecure handling of dangerous inline-attachments

Status: RESOLVED DUPLICATE of bug 183837

(SeaMonkey :: MailNews: Message Display, defect)

Description

[mhonline]

Well - 1000 open issues related to mail-attachments
I am sure this is a duplicate - you will find it.

I just learned, that Mail-attachments are not deleted from the inbox-file, when
I want to delete them. 

Supposed I have mail with a trojan in it as an base64-inline-attachement.
The delete function will set the status to invisible only. My new virus-scanner
showed them all well existing.

Note: I can extract any malicious code from my Inbox-file I received for within
the last 18 month. You like to have some? No problem.

Excuse me for this, but how was the guy who invented such nonsens? I like to
know. Delete should be delete - nothing else.

Martin


(need I to stop using Mozilla now?)
(is it better to have this issue kept confidental?)

Comment 1

[Daniel Veditz [:dveditz]]

Known behavior, no need for confidential flag.

By default mail folders should be compacted (physically removing deleted mail)
when it would save over 100K. You might have to empty the trash first, but you
can set the mail account to empty trash every exit. Non-immediate delete is not
such an unusual concept, it's just like Mac's trash can and Windows's recycle
bin. I suspect this is a wontfix, but that's up to the mail guys.

Comment 2

[mhonline]

hello Daniel

I am not quite sure, is that really a "wontfix" ?
"Compact" works as expected - But there is no option to do this "by default"
when the folder exceeds a set amount of memory.

However:
So I am right: Junk or trash is not moved/deleted from the In-box?
May be we can find better way than the manual compacting of folders
rgds
Martin

Comment 3

[Mike Cowperthwaite]

(In reply to comment #2)
> May be we can find better way than the manual compacting of folders

bug 177074, bug 197605, bug 205756, bug 223525, bug 255687

*** This bug has been marked as a duplicate of 183837 ***