41150 - bcc Information Revealed if Msg Forwarded from Sent Folder

Status: VERIFIED FIXED

(MailNews Core :: Composition, defect, P2)

Description

[sol]

If you forward a message from your "Sent" folder that contains bcc addressees, 
the bcc information is included in the forwarded message. This information 
should *not* be included in the forwarded message.

The bcc information is included if you "forward inline" or "foward quoted". The 
bcc information is not included if you "foward as attachment".

Build ID - 2000-05-31-08 on WinNT

Steps to reproduce:

1. Launch Seamonkey

2. Start Mail (Tasks | Mail) and supply password when requested.

3. Compose a message and include yourself as a "bcc" in the message

4. Send the message

5. Get messages and read the message you sent in step #4 in your "Inbox"

Note: The bcc information included in step #3 does not appear in the message

6. Open your "Sent" folder and select the message you sent in step #4

Note: The bcc information included in step #3 *does* appear in the message - 
this is valuable information to have in the Sent folder. (It's not a bug!)

7. Make sure that your preferences are set to forward messages either as 
"forward inline" or "foward quoted", and *not* "forward as attachment (Edit | 
Preferences ... | Composing Messages | Forward messages: "Quoted" or "Inline").

8. Forward the message from your "Sent" folder to yourself.

9. Get messages and select the message you forwarded to yourself in step #8.

Expected result: The message you originally sent in step #4 is forwarded, but 
does *not* contain the bcc information you included in step #3

Actual result: The message you sent in step #4 is forwarded and includes the bcc 
information you included in step #3

Comment 1

[rhp (gone)]

Actually, this is probably me. 

- rhp

Comment 2

[Sheela Ravindran]

-change qa contact

Comment 3

[Sheela Ravindran]

Adding keyword 

Comment 4

[scottputterman]

marking nsbeta1+ and moving to mozilla0.9

Comment 5

[Ben Bucksch (:BenB)]

> The bcc information is included if you "forward inline" or "foward quoted". The 
> bcc information is not included if you "foward as attachment".

Duh! That#S exactly the wrong way around: It should be hidded, if possible (i.e.
for inline and quoted). Forward As Attachment must keep the mail as-is,
on-the-wire, without *any* change.

Comment 6

[Jean-Francois Ducarroz]

I have a fix for not showing BCC when forwarding inline. I don't want to add it
back when forwarding as attachment despite we should not alter the message.
Revealing BCC recipients could have very bad consequence especially when the
sender cannot realize that!

Comment 7

[Jean-Francois Ducarroz]

Attachment: Proposed fix

Comment 8

[Jean-Francois Ducarroz]

QA: they is 3 different ways to display headers when forwarding inline a message
depending of the value of the pref mail.show_headers which could be 0, 1 or 2.
Please test all 3 cases. Thanks

Comment 9

[varada]

r=varada

Comment 10

[David :Bienvenu]

sr=bienvenu, but instead of commenting out the offending lines, can you just
remove them and add a comment to the effect that we don't want to forward bcc
headers?

Comment 11

[Jean-Francois Ducarroz]

OK, I will...

Comment 12

[Jean-Francois Ducarroz]

Fixed and checked in

Comment 13

[Sheela Ravindran]

verified on the following builds
2001-04-04-12 win98
2001-04-04-08 mac
2001-04-04-14 linux