3 ms·
Instead of trying to reimplement GPG, they could have added the necessary APIs to WebExtensions. Not directly related, but maybe Thunderbird shouldn't use Geck
by anoncake 6y ago
Instead of trying to reimplement GPG, they could have added the necessary APIs to WebExtensions.
Not directly related, but maybe Thunderbird shouldn't use Gecko to render emails. A smaller renderer with limited features may be sufficient and more secure.
- tracker1 6y agoOr... disable any JS runtime in a webview/iframe for the message. I get using an HTML rendering engine, I don't get ever enabling JS. Worst offense was when Outlook (and Express) used the IE rendering engine with JS in "local" (unrestricted) trust mode. Melissa/ILoveYou etc...
- anoncake 6y agoThat's about the bare minimum. Does any modern client not do that? But I think an HTML renderer that doesn't even have support for Javascript, audio and video tags, perhaps parts of CSS, etc. has a smaller attack surface.
- tracker1 6y agoAutomatic playing of audio or video, and no eval support in css would also be a good idea.