We're calling on all EU-based Mozillians with iOS or iPadOS devices to help us monitor Apple’s new browser choice screens. Join the effort to hold Big Tech to account!

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Message preview doesn't actually close.

  • 1 phendula
  • 1 inayo le ngxaki
  • 3 views
  • Impendulo yokugqibela ngu Matt

more options

WTF, guys? Pressing F8 to close message preview doesn't actually close it, it just hides it.

This is a serious security issue. If someone sends me an email with malicious code in it, the message preview pane (even when closed) WILL STILL EXECUTE THE CODE!!!!!

Please fix this, YESTERDAY!!!

WTF, guys? Pressing F8 to close message preview doesn't actually close it, it just hides it. This is a serious security issue. If someone sends me an email with malicious code in it, the message preview pane (even when closed) WILL STILL EXECUTE THE CODE!!!!! Please fix this, YESTERDAY!!!

All Replies (1)

more options

Your comment displays a serious lack of of understanding of how Thunderbird actually manages mail.

Scripts do not run. So it does not matter what malicious payload the mail contains. You can open it, dissect it, check it's source. It is harmless. This is not so in most Microsoft mail readers or web mail which will execute scripts. But it is so in Thunderbird.

Similarly any malicious content in an attachment would remain inert as mime attachments are not decoded until you actually chose to open them. The only possible exception would be through displaying images and remote images are disabled b default.