The issue in the message I'm referring to is resolved in the meantime (an IE8 bug with regards to the filename of the attachment, now being workarounded by Roundcube, thanks to A.L.E.C), but now I've got another one:
Just for testing purposes, I created a message with an ".eml" attachment (checking if it would be declared as "message/rfc822", but due to some reason we still need to figure out on our server, it has been declared as "text/plain").
If I click on this attachment, I get the yellow warning Thomas described in his initial message. First of all, the message is confusing:
WARNING! This attachment is suspicious because its type doesn't match the type declared in the message. If you do not trust the sender, you shouldn't open it in the browser because it may contain malicious contents.
Expected: text/plain (.eml); found: text/plain (.asc)
Hmm, why a warning then, if text/plain is both expected and found...? And where does this "(.asc)" come from?
But more important: If I click on the button "Show it anyway", nothing happens. Really nothing (the window stays as it is, the attachment is not being displayed, as often as I click on that button). The only thing I can do (and that will work) is to close the window.
IE8 and Win7/64.
So:
Am 27.11.2012 18:08, schrieb Thomas Bruederli:
Clicking the button will let the user see the attachment anyhow but since this is all new, we're seriously interested in your feedback and common problems resulting from this new check. I hope we can then fine-tune it a bit and catch some common and harmless cases.
Feedback above. ;)
Cheers,
Michael Heydekamp Co-Admin freexp.de Düsseldorf/Germany
Am 28.11.2012 01:11, schrieb Michael Heydekamp:
Am 27.11.2012 18:08, schrieb Thomas Bruederli:
Hello folks
Today we introduced a new validation mechanism for message attachments which are supposed to be displayed inside the browser.
I can't figure out what "today" exactly means. I'm currently using "Roundcube Webmail 0.9-git [GIT 20121127.1959]", does this version already contain this mechanism?
If so, it doesn't work for me:
Now, with the new attachment validation in place, your users might see some yellow warnings (see attached image) because sometimes email messages are just incorrectly formatted even if all the contents are safe. Clicking the button will let the user see the attachment anyhow but since this is all new, we're seriously interested in your feedback and common problems resulting from this new check. I hope we can then fine-tune it a bit and catch some common and harmless cases.
Unlike before, with IE8 on Win7/64 I can't display your attached image "rcmail_attachment_validation_warning.png" inside the browser anymore. Clicking on the "show" link throws a warning in IE8 (see attached).
After clicking this bar and selecting the option "Datei herunterladen" (= Download file), I get the typical Win7 download dialogue (see attached).
After clicking on "Öffnen" (= Open) I get a safety warning (see attached).
After clicking on "Zulassen" (= Allow) the PNG is displayed in the "Windows-Fotoanzeige". :-(
I don't like that. ;-) How can we get the previous behaviour back, where images could be displayed inside the browser with just one single click...? -- Michael Heydekamp Co-Admin freexp.de Düsseldorf/Germany _______________________________________________ Roundcube Development discussion mailing list dev@lists.roundcube.net http://lists.roundcube.net/mailman/listinfo/dev