[prev in list] [next in list] [prev in thread] [next in thread] 

List:       kde-commits
Subject:    KDE_3_2_BRANCH: kdepim/kmail
From:       Ingo Klöcker <kloecker () kde ! org>
Date:       2004-01-21 22:59:15
Message-ID: 20040121225915.B94281A27 () office ! kde ! org
[Download RAW message or body]

CVS commit by kloecker: 

Backport: Fix bug 73085: KMail discloses hidden recipients (BCC) in forwarded email
Also remove all private header fields from forwarded messages.

CCMAIL:coolo@kde.org
Please move the tag. Since this fixes a privacy problem the fix should already be in KDE 3.2.0.


  M +6 -0      kmcommands.cpp   1.99.2.1


--- kdepim/kmail/kmcommands.cpp  #1.99:1.99.2.1
@@ -906,4 +906,7 @@ void KMForwardCommand::execute()
           msgPartText += " (fwd)";
         msgPartText += "\n\n";
+        // remove headers that shouldn't be forwarded
+        msg->removePrivateHeaderFields();
+        msg->removeHeaderField("BCC");
         // set the part
         msgPartText += msg->headerAsString();
@@ -1015,4 +1018,7 @@ void KMForwardAttachedCommand::execute()
   // iterate through all the messages to be forwarded
   for (KMMessage *msg = msgList.first(); msg; msg = msgList.next()) {
+    // remove headers that shouldn't be forwarded
+    msg->removePrivateHeaderFields();
+    msg->removeHeaderField("BCC");
     // set the part
     KMMessagePart *msgPart = new KMMessagePart;


[prev in list] [next in list] [prev in thread] [next in thread]