Hi, folks, This is odd. Just recently, at home, even though I have it set to display messages as plain text, I'm suddenly seeing pics attached to spam inline, as though I had it set to display html. Can't find anything to make it stop - anyone have a clue? mark
Leonard den Ottolander
2016-Dec-18 17:47 UTC
[CentOS] Semi-OT: thunderbird displaying inline
Hello Mark, On Sun, 2016-12-18 at 11:56 -0500, mark wrote:> This is odd. Just recently, at home, even though I have it set to display > messages as plain text, I'm suddenly seeing pics attached to spam inline, as > though I had it set to display html. > > Can't find anything to make it stop - anyone have a clue?You are probably being confronted with content with content-disposition: inline. Many muas display such content, exposing you to possible attacks that target bugs in rendering libraries. Not sure if there's a switch to disable the rendering of content with disposition inline in TB but at least now you know what to search for :) . Evolution does not have such an switch on C6 and C7, but recent releases do: https://bugzilla.gnome.org/show_bug.cgi?id=769388 Regards, Leonard. -- mount -t life -o ro /dev/dna /genetic/research
Hi, Leonard, On 12/18/16 12:47, Leonard den Ottolander wrote:> On Sun, 2016-12-18 at 11:56 -0500, mark wrote: >> This is odd. Just recently, at home, even though I have it set to display >> messages as plain text, I'm suddenly seeing pics attached to spam inline, as >> though I had it set to display html. >> >> Can't find anything to make it stop - anyone have a clue? > > You are probably being confronted with content with content-disposition: > inline. Many muas display such content, exposing you to possible attacks > that target bugs in rendering libraries. > > Not sure if there's a switch to disable the rendering of content with > disposition inline in TB but at least now you know what to search > for :) . Evolution does not have such an switch on C6 and C7, but recent > releases do: https://bugzilla.gnome.org/show_bug.cgi?id=769388 >Thanks. Knowing the "magic words" always helps in a search. Thing is, t-bird never *used* to do this - it's only recently, I think.... mark