578104 - Conversion of data: URI as image source provides mangled attachment name, may not allow saving images pasted or drag-and-dropped

Status: RESOLVED FIXED

(MailNews Core :: Composition, defect)

Description

[rsx11m]

Editor bug 490879 has removed the temporary file when pasting image data from the clipboard, resulting in a "data:image/png;base64,..." URI instead of a file reference. Per bug 490879 comment #32, this appears to be already correctly translated to an <img src="cid:..."> tag in the composed HTML for the message.

However, the created file name for this data-URI is a base64-encoded string without any file extension, and without any useful meaning. Thus, to ensure proper handling by e-mail clients relying on file extensions to determine the file type rather than the Content-Type header, a generic file name with proper extension should be assigned. The current appearance of the attachment is:

    Content-Type: image/png;
     name="sUv...CYII="
    Content-Transfer-Encoding: base64
    Content-ID: <part1. ...@...>
    Content-Disposition: inline;
     filename="sUv...CYII="

where "..." replaces strings of arbitrary lengths.

Comment 1

[Dan Mosedale (:dmosedale, :dmose)]

So in the first Thunderbird release shipping off of Gecko 2.0, this will effectively be a regression, correct?

This is presumably likely to be a problem for all Windows users, since the OS doesn't do metadata-based typing of files, right?

Comment 2

[rsx11m]

Yes, marking as regression from 1.9.2-branch behavior. It's a problem for any
OS which relies on file extensions to determine file type and opening actions.

Comment 3

[rsx11m]

Since the same mechanism has been used in bug 609632 for images inserted by drag-and-drop as well, the problem shows up for those images now too (thus, only Insert > Image provides a meaningful file name as intended, or if the image is attached as a regular attachment outside of the message body).

The problem for the drag-and-drop case is that the editor apparently does no longer provide a filename at all, thus either a similar mechanism as to be found for copy-and-paste to "make up" a filename needs to be used, or an editor patch provided to include the filename into the <img> node.

I've set the "relnote" keyword for upcoming TB 3.3a1 and SM 2.1b2 releases.

Comment 4

[Joe Sabash [:JoeS1]]

So at this point it's pretty hard to save an image that has been dragged in the body of an html email. If you attempt Right click>>save image as you get a dialog with "inbox" as the file name. You can furnish a name and the correct file type manually and the file will save correctly.
For all intents and purposes, saving inline images that have been dragged there is badly broken.

Comment 5

[rsx11m]

> (comment #3) editor patch provided to include the filename into the <img> node.

Ehsan, would adding some "moz-filename" attribute (or another mechanism to possibly add the file name directly to the src="data:..." URI) be subject to Firefox's upcoming feature freeze, i.e., are there any time constraints?

Comment 6

[Joe Sabash [:JoeS1]]

Not sure if this is a recent regression or not, but inline images that have been copy/pasted into the body are also not assessable with right-click>>save image as.
This is important functionality that is lost in recent builds.

Bumping severity to major.

Comment 7

[Joe Sabash [:JoeS1]]

Attachment: mbox format test

Insert image vs pasted image

Comment 8

[rsx11m]

Joe, with your test case, I get a Save-As dialog on all platforms (Windows XP, Windows 7, and Linux), but only Windows XP won't allow me to save your second image. I can save in the others, though the file isn't recognized as GIF image due to the lack of a proper file extension.

In general, these are two different issues, one triggering the other. The main part of this bug needs to solve the "filename" attribute being an arbitrary(?) base64-encoded string, somewhere assigned in the mailnews backend code. Given that such a filename value causes problems already in Thunderbird itself and apparently on all platforms, even if you do manage to save it, sure justifies the "major" severity. The other problem is the Thunderbird Message Reader UI not allowing to save such an inlined message/related attachment under certain conditions. I'd suggest to spin this off to a separate bug, as it's a backend vs. frontend issue, and have made the summary of this bug a bit more specific.

Comment 9

[(no longer active)]

(In reply to comment #5)
> > (comment #3) editor patch provided to include the filename into the <img> node.
> 
> Ehsan, would adding some "moz-filename" attribute (or another mechanism to
> possibly add the file name directly to the src="data:..." URI) be subject to
> Firefox's upcoming feature freeze, i.e., are there any time constraints?

This is something that we are not going to do in the core editor code, since one of the reasons why we switched to using data: URIs in the first place was to make sure that information about local filesystem is not passed to web pages.

Here is something that I don't understand yet.  Why does mailnews need to have the original file name?  Why can't it just use an arbitrary name, such as Image.png (with the correct file extension, of course).  And is this only an issue when saving the image, or when attaching it to an email as well?

Comment 10

[rsx11m]

It would be mainly a matter of consistency:
 - If you use Insert > Image, the file name is used for the attachment name;
 - if you use drag-and-drop, the same image doesn't get the file name;
 - also, if you drag-and-drop from a web site, the URL leaf is the name.

Personally, I'm fine with a generic name similar to screen shots if there isn't an easy way to "hide" the source file name in an data: URI; the main issue is indeed the lack of a proper file extension and possibly some special characters in the file name causing the saving process and/or opening the file to fail.

I'm adding Bryan as CC for the file-name issue, as it's mainly a UX impact.

Comment 11

[rsx11m]

(In reply to comment #9)
> as Image.png (with the correct file extension, of course).  And is this only
> an issue when saving the image, or when attaching it to an email as well?

Correct, this should only matter for inserted images, not "true" attachments.
 
Given that we won't have a leaf name for 5.0, but need "something" to make other e-mail clients happy which expect a well-typed attachment name, going with a fixed prefix (maybe "moz-image.png" in analogy to "moz-screenshot.png" used before bug 490879 removed that) and the MIME-registered file extension is probably the way to go. Thanks for putting this on the 5.0b2 blocking list.

Comment 12

[David :Bienvenu]

Attachment: proposed fix

this fixes it for me - if we get a data uri w/o a file name, then we create a random 8 char name with the chars from 'a' to 'j', and look up the file extension in the mime registry.

I haven't tested that we handle data uri's with filenames in them - I haven't figured out how to get one of those in the compose window yet.

Comment 13

[David :Bienvenu]

Attachment: proposed fix

I tested by hand that the data uri with a filename parameter does get parsed correctly. As far as the image is concerned, dragging an image file from the file system into the compose window exercises the code and works, though I don't believe that can be easily tested with mozmill all the way through.

Comment 14

[Mark Banner (:standard8)]

To test a data uri, enter one in Firefox, e.g.

data:image/png;filename=attachment.png;base64,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

then drag the image (not the url) from Firefox to the compose window.

I did this and it worked fine.

Comment 15

[Mark Banner (:standard8)]

Comment on attachment 537949 [details] [diff] [review]
proposed fix

>+        // no filename; need to construct one based on the content type.
>+        nsCOMPtr<nsIMIMEService> mimeService (do_GetService(NS_MIMESERVICE_CONTRACTID));

nit: It shouldn't ever happen, but we should null check this. Please also drop the space before the (

r=me with that fixed, please land on comm-central and comm-miramar.

Comment 16

[David :Bienvenu]

fixed on trunk http://hg.mozilla.org/comm-central/rev/c0d4c89007cf and for miramar - http://hg.mozilla.org/releases/comm-miramar/rev/c10b34cff335

Presumably, this should land on comm-aurora as well?

Comment 17

[Mark Banner (:standard8)]

Checked into aurora: http://hg.mozilla.org/releases/comm-aurora/rev/eef9226b31eb