<?xml version="1.0" encoding="UTF-8"?> 
<?xml-stylesheet href="https://dev.horde.org/themes/horde//default/feed-rss.xsl" type="text/xsl"?> 
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"> 
 <channel> 
  <title>Firefox 3 Web Based Protocol Handler support</title> 
  <pubDate>Fri, 10 Apr 2026 07:03:42 +0000</pubDate> 
  <link>https://bugs.horde.org/ticket/6748</link> 
  <atom:link rel="self" type="application/rss+xml" title="Firefox 3 Web Based Protocol Handler support" href="https://bugs.horde.org/ticket/6748/rss" /> 
  <description>Firefox 3 Web Based Protocol Handler support</description> 
 
   
   
  <item> 
   <title>Add support for Firefox 3 web based protocol handlers:

http</title> 
   <description>Add support for Firefox 3 web based protocol handlers:

http://developer.mozilla.org/en/docs/Web-based_protocol_handlers



Probably also useful for other apps as well.</description> 
   <pubDate>Fri, 23 May 2008 19:15:07 +0000</pubDate> 
   <link>https://bugs.horde.org/ticket/6748#t45499</link> 
  </item> 
   
  <item> 
   <title>&gt; Add support for Firefox 3 web based protocol handlers:

&gt; </title> 
   <description>&gt; Add support for Firefox 3 web based protocol handlers:

&gt; http://developer.mozilla.org/en/docs/Web-based_protocol_handlers



attached patch touches two files:



1)  IMP.php  function: getComposeArgs

     mailto URI refers to the message body as &quot;body&quot;, not as &quot;message&quot;.

     

2)  The added HTML file registers the mailto handler for FF3

     (has to be called from same domain as IMP, see mentioned FF3 docs)

     Keep the %26 for &amp; in the handler URL!





A security thought: I propose to strip CC and BCC from the mailto: URL (i.e. don&#039;t copy them in getComposeArgs, if this function is not used otherwise too), as these fields are not always shown in the compose popup and the (normal) user would not expect these copies. From RFC 2368 (The mailto URL scheme):



4. Unsafe headers

   The user agent interpreting a mailto URL SHOULD choose not to create

   a message if any of the headers are considered dangerous; it may also

   choose to create a message with only a subset of the headers given in

   the URL.  Only the Subject, Keywords, and Body headers are believed

   to be both safe and useful.



   The creator of a mailto URL cannot expect the resolver of a URL to

   understand more than the &quot;subject&quot; and &quot;body&quot; headers.



 

Martin</description> 
   <pubDate>Thu, 12 Jun 2008 14:14:08 +0000</pubDate> 
   <link>https://bugs.horde.org/ticket/6748#t46316</link> 
  </item> 
   
  <item> 
   <title>This has been implemented for IMP 4.2.1.</title> 
   <description>This has been implemented for IMP 4.2.1.</description> 
   <pubDate>Fri, 27 Jun 2008 22:08:47 +0000</pubDate> 
   <link>https://bugs.horde.org/ticket/6748#t46953</link> 
  </item> 
   
   
 
 </channel> 
</rss> 
