Join the Mozilla’s Test Days event from 9–15 Jan to test the new Firefox address bar on Firefox Beta 135 and get a chance to win Mozilla swag vouchers! 🎁

为提升您的使用体验,本站正在维护,部分功能暂时无法使用。如果本站文章无法解决您的问题,您想要向社区提问的话,请到 Twitter 上的 @FirefoxSupport 或 Reddit 上的 /r/firefox 提问,我们的支持社区将会很快回复您的疑问。

搜索 | 用户支持

防范以用户支持为名的诈骗。我们绝对不会要求您拨打电话或发送短信,及提供任何个人信息。请使用“举报滥用”选项报告涉及违规的行为。

详细了解

Message preview doesn't actually close.

  • 1 个回答
  • 1 人有此问题
  • 3 次查看
  • 最后回复者为 Matt

more options

WTF, guys? Pressing F8 to close message preview doesn't actually close it, it just hides it.

This is a serious security issue. If someone sends me an email with malicious code in it, the message preview pane (even when closed) WILL STILL EXECUTE THE CODE!!!!!

Please fix this, YESTERDAY!!!

WTF, guys? Pressing F8 to close message preview doesn't actually close it, it just hides it. This is a serious security issue. If someone sends me an email with malicious code in it, the message preview pane (even when closed) WILL STILL EXECUTE THE CODE!!!!! Please fix this, YESTERDAY!!!

所有回复 (1)

more options

Your comment displays a serious lack of of understanding of how Thunderbird actually manages mail.

Scripts do not run. So it does not matter what malicious payload the mail contains. You can open it, dissect it, check it's source. It is harmless. This is not so in most Microsoft mail readers or web mail which will execute scripts. But it is so in Thunderbird.

Similarly any malicious content in an attachment would remain inert as mime attachments are not decoded until you actually chose to open them. The only possible exception would be through displaying images and remote images are disabled b default.