After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 300424 - [rfe] evolution should check if urls in html mail are obvious spoofs
[rfe] evolution should check if urls in html mail are obvious spoofs
Status: RESOLVED DUPLICATE of bug 256160
Product: evolution
Classification: Applications
Component: Mailer
unspecified
Other All
: Normal enhancement
: ---
Assigned To: evolution-mail-maintainers
Evolution QA team
Depends on:
Blocks:
 
 
Reported: 2005-04-13 04:32 UTC by Allison Karlitskaya (desrt)
Modified: 2005-07-16 13:55 UTC
See Also:
GNOME target: ---
GNOME version: Unversioned Enhancement


Description Allison Karlitskaya (desrt) 2005-04-13 04:32:08 UTC 
An idea of a friend of mine:

If Evolution receives an HTML email that contains a link like this:

[a href="http://bad.guys.net/"]https://secure.paypal.com/[/a]

In the case that the shown link (ie: the part the user sees) starts with http:
or https: then it should check to ensure that the href URL is equal to the URL
that is shown to the user.  If it isn't, it should do something appropriate
(like give a warning, disable the link, show the correct link URL, etc).
Comment 1 Allison Karlitskaya (desrt) 2005-04-13 04:45:07 UTC 
Few things to think about: (writing htp instead of http to prevent bugzilla
auto-linking)



[a href='htp://death/'] htp://life/[/a]
[a href='htp://death/'][span]htp://life/[/span][/a]
[a href='htp://death/']h[b][/b]tp://life/[/a]

etc

But since 99.99% of the time there are no tags inside of a link, these are
fairly marginal cases.
Comment 2 Luis Villa 2005-06-03 18:12:56 UTC 
No comment why? This is a big feature that lots of other clients are picking up;
we need to think about doing the same.
Comment 3 Luis Villa 2005-06-03 18:13:11 UTC 
And confirming.
Comment 4 André Klapper 2005-07-16 13:55:33 UTC 

*** This bug has been marked as a duplicate of 256160 ***