Tickets :: Comment on [#10477] default setting for inline images: give link to show them

* Your Email Address
* Spam protection	Enter the letters below: .._..__ __.. . \| \| [__)(__ \ / \__\|_\|_\| .__) \/
Comment	>>> Displaying HTML messages by default is a >>> gigantic security hole that an admin has to make a choice to allow >>> locally. >> >> OK can I suggest a better error message, such as HTML view is >> disabled for security reasons. > > We already do this in IMP 5 > >> Also, are you saying that this is a gigantic security hole in general >> for all webmail services, even yahoo and gmail? Or specific to horde? > > It's a gigantic security hole in general. Yahoo and gmail are not > immune to this. And advantage they may have is that their filtering > is maintained by a (potentially) large group of engineers who are > paid full-time. But that doesn't mean that their filters are > foolproof.
Attachment
Watch this ticket