Bug 448674

Summary:	Spam false-positive, because link's href & text capitalization mismatch
Product:	[Applications] kmail2	Reporter:	ratijas <me>
Component:	general	Assignee:	kdepim bugs <kdepim-bugs>
Status:	RESOLVED FIXED
Severity:	normal
Priority:	NOR
Version First Reported In:	unspecified
Target Milestone:	---
Platform:	Other
OS:	Linux
Latest Commit:	https://invent.kde.org/pim/messagelib/commit/ceee9f3b1047a62a76bc67268a1100f6bc0d1cbe	Version Fixed In:	5.21.0
Sentry Crash Report:

Description ratijas 2022-01-17 20:29:17 UTC

SUMMARY

KMail detected that an email to Qt [Interest] mailing list might be spam (again), this time because one of the links in mail body was an HTML link with text and href attribute set separately:

> Please visit <a h=
> ref=3D"https://bugreports.qt.io/browse/QTBUG-99195" target=3D"_blank" title=
> =3D"https://bugreports.qt.io/browse/qtbug-99195">
> https://bugreports.qt.io/browse/QTBUG-99195</a> and provide your use cases =

This email can be viewed on the web.

1. Plain text: https://lists.qt-project.org/pipermail/interest/2022-January/037879.html
2. HTML: https://lists.qt-project.org/pipermail/interest/attachments/20220117/02bb676c/attachment.htm

STEPS TO REPRODUCE

1. Open this email in KMail

OBSERVED RESULT

> Details:
> This email contains a link which reads as 'https://bugreports.qt.io/browse/qtbug-99195' in the text, but actually points to 'https://bugreports.qt.io/browse/QTBUG-99195'. This is often the case in scam emails to mislead the recipient

EXPECTED RESULT

This is not a spam.

SOFTWARE/OS VERSIONS
Operating System: Arch Linux
KDE Plasma Version: 5.24.80
KDE Frameworks Version: 5.91.0
Qt Version: 5.15.2
Kernel Version: 5.16.0-arch1-1 (64-bit)
Graphics Platform: X11
Processors: 8 × Intel® Core™ i7-6700HQ CPU @ 2.60GHz
Memory: 15.6 GiB of RAM
Graphics Processor: NVIDIA GeForce GTX 970M/PCIe/SSE2

Comment 1 Laurent Montel 2022-07-11 12:01:55 UTC

Git commit ceee9f3b1047a62a76bc67268a1100f6bc0d1cbe by Laurent Montel.
Committed on 11/07/2022 at 12:01.
Pushed by mlaurent into branch 'master'.

Fix bug 448674: Spam false-positive, because link's href & text capitalization mismatch
FIXED-IN: 5.21.0

M  +4    -0    messageviewer/src/scamdetection/autotests/scamdetectionwebenginetest.cpp
M  +28   -22   messageviewer/src/scamdetection/scamdetectionwebengine.cpp

https://invent.kde.org/pim/messagelib/commit/ceee9f3b1047a62a76bc67268a1100f6bc0d1cbe