@dikiy-evrej I don't think that the recent change was in Thunderbird.
The recent change here was to drop the attach= parameter from the mailto
URL passed to Thunderbird, so that if you click a malicious mailto link
in e.g. Chrome, it can't trick you into sending arbitrary files.

Problem was that xdg-email parses its command line arguments - supplied
by e.g. simple-scan - and converts them to a mailto URL with attach=
parameter - which it then drops before calling TB.

My hack in the simple-scan bug above is to only drop the attach
parameter if the caller is Chrome or Chromium as those are the browsers
used in my environment, but a better fix is required...

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1909941

Title:
  xdg-email changes break simple-scan email functionality

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/xdg-utils/+bug/1909941/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to