[sylpheed:30223] Re: Open in browser

Pierre Etchemaïté petchema at concept-micro.com
Mon Oct 23 02:18:00 JST 2006


Le Fri, 20 Oct 2006 11:33:41 -0600, Bob White <bob at bob-white.com> a écrit :

> You can already do that.  click on the attachments tab at the top of the
> message.  Double click the html mime attachment and it will open in
> your browser.  You have to have the browser defined in Common
> Preferenced -> Details -> External Commands.

By the way, while not rendering HTML (and specially not inlined
images/javascript/...) can be seen as a security feature, I wonder in
what "security context" a browser launched that way will render the
page...

Since the rendered page is probably stored in a temp file, I suspect it
would be rendered in some "local security context"; that could be more
dangerous than either MUAs rendering a small subset of HTML tags
themselves, or browsing the content by following the URL on the
original site (where security limitations of your favorite browser will
probably kick in).

Saving all the attachments of the email as temporary files so that
inlined components can be seen would make that worse...

Just my $0.02.

BR,
Pierre.



More information about the Sylpheed mailing list