Skip to site navigation (Press enter)
in mails get through the image blocker!</span></a></span> </h1> <p class="darkgray font13"> <span class="sender pipe"><a href="/search?l=mozilla-security@mozilla.org&q=from:%22Gian%5C-Pa%22" rel="nofollow"><span itemprop="author" itemscope itemtype="http://schema.org/Person"><span itemprop="name">Gian-Pa</span></span></a></span> <span class="date"><a href="/search?l=mozilla-security@mozilla.org&q=date:20040924" rel="nofollow">Fri, 24 Sep 2004 07:21:42 -0700</a></span> </p> </div> <div itemprop="articleBody" class="msgBody"> <!--X-Body-of-Message--> <pre style="margin: 0em;">I have recived a mail like this: --------------------------------- From - Mon Sep 20 13:47:59 2004 X-Account-Key: account1 X-UIDL: UID2654-1086385881 X-Mozilla-Status: 0001 X-Mozilla-Status2: 00000000 Return-Path: <[EMAIL PROTECTED]> X-Original-To: [EMAIL PROTECTED] Delivered-To: [EMAIL PROTECTED] Received: from 112.com (unknown [221.216.14.36]) by smtp-in1.email.it (Email.it) with ESMTP id 074B7100026 for <[EMAIL PROTECTED]>; Mon, 20 Sep 2004 07:44:51 +0200 (CEST) From: =?GB2312?B?ztI=?= <[EMAIL PROTECTED]> Subject: =?GB2312?B?usO+w8O7warC56Os1+69/LrDwvCjvw==?= To: [EMAIL PROTECTED] Content-Type: text/html;charset="GB2312" Content-Transfer-Encoding: 8bit Reply-To: [EMAIL PROTECTED] Date: Thu, 20 Sep 2001 13:45:24 +0800 X-Priority: 3 X-Mailer: Foxmail 4.2 [cn] Message-Id: <[EMAIL PROTECTED]></pre><br> <tt><html><head></head><body><table width=760 height=2000 border=0 cellspacing=0 cellpadding=0 align=center><br> <tr><td ><iframe src=<a href="http://www.91looks.com">http://www.91looks.com</a> frameborder=0 width=100% height=100% marginwidth=0 marginheight=0 scrolling=no></iframe></td></tr><br> </table></body></html><br> ---------------------------------</tt><br> <br> <pre style="margin: 0em;">as you can see its a spam mail with Date header crafted...</pre><br> <pre style="margin: 0em;">So it seems sended in the 2001! :o</pre><br> <pre style="margin: 0em;">But as u see from mail server date, that isn't true.</pre><br> <tt>BUT THE REAL PROBLEM is that often span mail uses images to see if u read the mail so, using iframe (maybe with a personal page for each one can control the users u read their spam! And is what i don't want!</tt><br> <br> <pre style="margin: 0em;">If i don't mark the mail as spam, the images and the hole sites loads</pre><br> <pre style="margin: 0em;">I think u should fix this bug/error.</pre><br> <pre style="margin: 0em;">Thanks,</pre><br> <pre style="margin: 0em;">.: Gian-Pa.com :.</pre><br> <pre style="margin: 0em;">PS: I love Mozilla project :D _______________________________________________ Mozilla-security mailing list [EMAIL PROTECTED] <a href="http://mail.mozilla.org/listinfo/mozilla-security">http://mail.mozilla.org/listinfo/mozilla-security</a> </pre> </div> <div class="msgButtons margintopdouble"> <ul class="overflow"> <li class="msgButtonItems"><a class="button buttonleft " accesskey="p" href="msg02302.html">Previous message</a></li> <li class="msgButtonItems textaligncenter"><a class="button" accesskey="c" href="index.html#02303">View by thread</a></li> <li class="msgButtonItems textaligncenter"><a class="button" accesskey="i" href="maillist.html#02303">View by date</a></li> <li class="msgButtonItems textalignright"><a class="button buttonright " accesskey="n" href="msg02304.html">Next message</a></li> </ul> </div> <a name="tslice"></a> <div class="tSliceList margintopdouble"> <ul class="icons monospace"> <li class="icons-email"><span class="subject"><a href="msg02304.html">Re: <iframe> in mails get through the image blocker!</a></span> <span class="sender italic">Gian-Pa</span></li> <li><ul> <li class="icons-email"><span class="subject"><a href="msg02304.html">Re: <iframe> in mails get through the image block...</a></span> <span class="sender italic">Daniel Veditz</span></li> </ul> </ul> </div> <div class="overflow msgActions margintopdouble"> <div class="msgReply" > <h2> Reply via email to </h2> <form method="POST" action="/mailto.php"> <input type="hidden" name="subject" value="<iframe> in mails get through the image blocker!"> <input type="hidden" name="msgid" value="cj1a6f$mmj1@ripley.netscape.com"> <input type="hidden" name="relpath" value="mozilla-security@mozilla.org/msg02303.html"> <input type="submit" value=" Gian-Pa "> </form> </div> </div> </div> <div class="aside" role="complementary"> <div class="logo"> <a href="/"><img src="/logo.png" width=247 height=88 alt="The Mail Archive"></a> </div> <form class="overflow" action="/search" method="get"> <input type="hidden" name="l" value="mozilla-security@mozilla.org"> <label class="hidden" for="q">Search the site</label> <input class="submittext" type="text" id="q" name="q" placeholder="Search mozilla-security"> <input class="submitbutton" name="submit" type="image" src="/submit.png" alt="Submit"> </form> <div class="nav margintop" id="nav" role="navigation"> <ul class="icons font16"> <li class="icons-home"><a href="/">The Mail Archive home</a></li> <li class="icons-list"><a href="/mozilla-security@mozilla.org/">mozilla-security - all messages</a></li> <li class="icons-about"><a href="/mozilla-security@mozilla.org/info.html">mozilla-security - about the list</a></li> <li class="icons-expand"><a href="/search?l=mozilla-security@mozilla.org&q=subject:%22%3Ciframe%3E+in+mails+get+through+the+image+blocker%5C%21%22&o=newest&f=1" title="e" id="e">Expand</a></li> <li class="icons-prev"><a href="msg02302.html" title="p">Previous message</a></li> <li class="icons-next"><a href="msg02304.html" title="n">Next message</a></li> </ul> </div> <div class="listlogo margintopdouble"> </div> <div class="margintopdouble"> </div> </div> </div> <div class="footer" role="contentinfo"> <ul> <li><a href="/">The Mail Archive home</a></li> <li><a href="/faq.html#newlist">Add your mailing list</a></li> <li><a href="/faq.html">FAQ</a></li> <li><a href="/faq.html#support">Support</a></li> <li><a href="/faq.html#privacy">Privacy</a></li> <li class="darkgray">cj1a6f$mmj1@ripley.netscape.com</li> </ul> </div> </body> </html> <script>(function(){function c(){var b=a.contentDocument||a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'9cf6c9b4ac636019',t:'MTc3MTM0NzA3MA=='};var a=document.createElement('script');a.src='/cdn-cgi/challenge-platform/scripts/jsd/main.js';document.getElementsByTagName('head')[0].appendChild(a);";b.getElementsByTagName('head')[0].appendChild(d)}}if(document.body){var a=document.createElement('iframe');a.height=1;a.width=1;a.style.position='absolute';a.style.top=0;a.style.left=0;a.style.border='none';a.style.visibility='hidden';document.body.appendChild(a);if('loading'!==document.readyState)c();else if(window.addEventListener)document.addEventListener('DOMContentLoaded',c);else{var e=document.onreadystatechange||function(){};document.onreadystatechange=function(b){e(b);'loading'!==document.readyState&&(document.onreadystatechange=e,c())}}}})();</script>