We're calling on all EU-based Mozillians with iOS or iPadOS devices to help us monitor Apple’s new browser choice screens. Join the effort to hold Big Tech to account!

Cerca nel supporto

Attenzione alle mail truffa. Mozilla non chiederà mai di chiamare o mandare messaggi a un numero di telefono o di inviare dati personali. Segnalare qualsiasi attività sospetta utilizzando l'opzione “Segnala abuso”.

Ulteriori informazioni

Questa discussione è archiviata. Inserire una nuova richiesta se occorre aiuto.

Message preview doesn't actually close.

  • 1 risposta
  • 1 ha questo problema
  • 3 visualizzazioni
  • Ultima risposta di Matt

more options

WTF, guys? Pressing F8 to close message preview doesn't actually close it, it just hides it.

This is a serious security issue. If someone sends me an email with malicious code in it, the message preview pane (even when closed) WILL STILL EXECUTE THE CODE!!!!!

Please fix this, YESTERDAY!!!

WTF, guys? Pressing F8 to close message preview doesn't actually close it, it just hides it. This is a serious security issue. If someone sends me an email with malicious code in it, the message preview pane (even when closed) WILL STILL EXECUTE THE CODE!!!!! Please fix this, YESTERDAY!!!

Tutte le risposte (1)

more options

Your comment displays a serious lack of of understanding of how Thunderbird actually manages mail.

Scripts do not run. So it does not matter what malicious payload the mail contains. You can open it, dissect it, check it's source. It is harmless. This is not so in most Microsoft mail readers or web mail which will execute scripts. But it is so in Thunderbird.

Similarly any malicious content in an attachment would remain inert as mime attachments are not decoded until you actually chose to open them. The only possible exception would be through displaying images and remote images are disabled b default.