Open Bug 1488008 Opened 6 years ago Updated 2 years ago

Dns prefetch performed in HTML mails even when forbidden

Categories

(MailNews Core :: Networking, defect)

defect

Tracking

(Not tracked)

People

(Reporter: Thomas.Ludwig, Unassigned)

Details

User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Build ID: 20100101

Steps to reproduce:

I used the site https://www.emailprivacytester.com/  with several test emails displayed as plain text, simplified HTML and HTML.

in about:config I had the following settings:

network.dns.disablePrefetch;true
network.prefetch-next;false

In the HTML mails any remote content was forbidden.


Actual results:

When using plain text and simplified HTML, all tests on that site failed as expected.

When using HTML mails, the following two tests were triggered:

DNS Prefetch - Link
DNS Prefetch - Anchor


Expected results:

As no remote content was allowed and dns prefetch was explicitly forbidden, all tests on that site should have failed.
Summary: Dns prefetch performed in HTML mails → Dns prefetch performed in HTML mails even when forbidden
Fails also for me using v60 on windows

http://kb.mozillazine.org/Network.dns.disablePrefetch
Status: UNCONFIRMED → NEW
Component: Untriaged → Networking
Ever confirmed: true
Product: Thunderbird → MailNews Core
All tests seem ok (remain gray) for me on linux, both with 60 and trunk.
I'm actually also on Linux (I had used the User-Agent Switcher add-on in Firefox). I just repeated the test with a fresh Firefox profile and can confirm the findings in my 1st post.

Magnus, if the tests for you were okay although my findings were confirmed by Wayne, this suggests that there seems to be, at least, an inconsistent behaviour in Thunderbird.

Btw: What is actually the intended behaviour in TB? IMO, even without those settings in about:config, DNS prefetch should never be done in email clients for privacy reasons.
No it's not intended to do DNS prefetch. 

(I'll note network.prefetch-next, is true by default, but still with that on, nothing turns red for me.)
I set network.dns.disablePrefetch to true and ran the test and DNS Prefetch Anchor and Link came back red. That's on Windows 10.
Severity: normal → S3
You need to log in before you can comment on or make changes to this bug.