search

roundcube / roundcubemail

The Roundcube Webmail suite
https://roundcube.net
GNU General Public License v3.0
5.88k stars 1.64k forks source link

All CSS styles always blocked when css contains url #7533

Open KasparVd opened 4 years ago

KasparVd commented 4 years ago

It seems that when an email contains the URL function within the CSS style section in the HTML head the entire CSS style section is removed/blocked until the user allows remotes resources to be loaded. I like to argue that with the release of the Elastic theme this behavior is less then optimal. Often the CSS style section contains styling for optimized mobile readability of emails. Since RC has embraced mobile (or rather small screen) usage, it might be worth considering just blocking the particular URL(s) in the CSS styles.

alecpl commented 4 years ago

It is just simpler (and therefor more secure) to block all styles than to replace the "evil" parts only. It does not mean it couldn't be done.

AaomtVp commented 5 months ago

I don't know what to do to allow my emails going out and other people's emails to me to be able to have a website address / URL in it and not cause the email to be blocked. Also, this wasn't a problem in the fall. I only started experiencing this problem a few months ago or so. What changed? And what do I need to do to be able to send people a link to website addresses and allow people to send me the same?