Re: [Evolution] Reply without quoting, deleting inline quoted attachments



Evo displayed the content as a tiny square embedded edit pane with
horizontal and vertical scrollbars.

The virus is an HTML message with an <iframe> element containing the
attachment, which tricks Outlook (and OE?) into opening the attachment
without the user saying so. The HTML says "<iframe width=100%
height=100%>", which GtkHTML misparses as "width=100 height=100", so you
get a 100x100 pixel square in which it tries to display the attachment
data as HTML.

When I replied, the same edit pane showed up in the compose
window, and I couldn't delete it.

That's wacky. The editor should probably ignore iframes...

-- Dan




[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]