6.0.0-beta1
7/28/25

[#861] S/MIME Content-Disposition not inline
Summary S/MIME Content-Disposition not inline
Queue Horde Framework Packages
Type Enhancement
State Resolved
Priority 2. Medium
Owners slusarz (at) horde (dot) org
Requester ctnpublic-horde (at) yahoo (dot) com
Created 11/19/2004 (7556 days ago)
Due
Updated 11/23/2004 (7552 days ago)
Assigned 11/19/2004 (7556 days ago)
Resolved 11/23/2004 (7552 days ago)
Milestone
Patch No

History
11/23/2004 07:37:35 PM Michael Slusarz Comment #3
State ⇒ Resolved
Reply to this comment
We now send our S/MIME encypted messages as Content-Disposition 'inline'.



I have convinced myself that it does make a lot of sense to view 
received S/MIME encrypted messages with dispositon 'attachment' 
inline.  However, this would require a bit of an API change in 
MIME_Viewer and MIME_Contents (basically allowing an individual 
MIME_Viewer to override a given Content-Disposition) and since we are 
in a featrure freeze, this will have to wait until after we release 
the stable versions.  I have put this into the horde/docs/TODO file.
11/19/2004 06:29:08 PM Chuck Hagenbuch Assigned to Michael Slusarz
 
11/19/2004 06:09:21 PM Michael Slusarz Comment #2
State ⇒ Assigned
Reply to this comment
No.  RFC 2183 allows the user agent to choose what the default should 
be if no Content-Disposition is defined - We have chosen 'attachment' 
for a variety of reasons.  *Never* honoring the Content-Disposition 
header, as your patch suggests, is incompatible with RFC 2183.  If the 
user wants us to display a MIME part as an attachment, there is no 
reason we should go against their wishes.



A correct fix may be to look at our S/MIME implementation and 
determine if it is desirable to send as 'inline' instead of 
'attachment'.


11/19/2004 05:44:38 PM ctnpublic-horde (at) yahoo (dot) com Comment #1
State ⇒ New
Priority ⇒ 2. Medium
Type ⇒ Enhancement
Summary ⇒ S/MIME Content-Disposition not inline
Queue ⇒ Horde Framework Packages
Reply to this comment
As generated by Outlook and IMP, an S/MIME message's 
Content-Disposition is attachment. As such, 
framework/MIME/MIME/Contents.php::canDisplayInline() currently 
disallows any possibility of such a message being displayed inline.



Content-Disposition is advisory anyway. Suggest not relying on it to 
determine inline-ability, e.g.:



Index: framework/MIME/MIME/Contents.php

===================================================================

RCS file: /repository/framework/MIME/MIME/Contents.php,v

retrieving revision 1.128

diff -r1.128 Contents.php

415,421c415

<         /* First check: The MIME headers allow the part to be inlined. */

<         if ($mime_part->getDisposition() != 'inline') {

<             return false;

<         }

<

<         /* Second check (save the most expensive for last):

<          * Check to see if the driver is set to inline. */

---
         /* Check to see if the driver is set to inline. */

Saved Queries