https://bugs.kde.org/show_bug.cgi?id=431218
Bug ID: 431218 Summary: mail viewer loads external fonts even with external refs disabled Product: kmail2 Version: 5.15.3 Platform: Debian testing OS: Linux Status: REPORTED Severity: grave Priority: NOR Component: UI Assignee: kdepim-bugs@kde.org Reporter: t...@tiwe.de Target Milestone: --- SUMMARY not sure about component severity: grave for security/privacy/tracking problem STEPS TO REPRODUCE 1. view HTML mail with <style>@font-face { src: url(… 2. enable HTML for this mail, but not external refs OBSERVED RESULT * text shows up with delay * message "… For security/privacy reasons external references are not loaded. …" is shown * external requests are made for the font(s) EXPECTED RESULT * no external requests * system font used instead SOFTWARE/OS VERSIONS Linux/KDE Plasma: (available in About System) KDE Plasma Version: 5.20.4 KDE Frameworks Version: 5.77.0 Qt Version: 5.15.2 ADDITIONAL INFORMATION The mail in question was from meetup.com, including user-specific links. If needed I can try to craft a more minimal example to provide it here. -- You are receiving this mail because: You are the assignee for the bug.