Bug 461050

Summary: Bogus scam warning with trailing space
Product: [Applications] kmail2 Reporter: Volker Kuhlmann <bugz57>
Component: generalAssignee: kdepim bugs <kdepim-bugs>
Status: REPORTED ---    
Severity: normal CC: bugz57, montel
Priority: NOR    
Version: 5.19.3   
Target Milestone: ---   
Platform: openSUSE   
OS: Linux   
Latest Commit: Version Fixed In:
Sentry Crash Report:
Attachments: Email with bogus scam warning

Description Volker Kuhlmann 2022-10-27 04:50:02 UTC 
SUMMARY
Bogus scam warning with trailing space in link text.

STEPS TO REPRODUCE
1. Read an email like this in kmail.

OBSERVED RESULT
Big warning in red reading "This email contains a link which reads as 'https://1stdomains.nz/renew ' in the
text, but actually points to 'https://1stdomains.nz/renew'. This is often the
case in scam emails to mislead the recipient"

EXPECTED RESULT
No warning.
I'm not too worried about a trailing space in the link text.

SOFTWARE/OS VERSIONS
5.19.3 (21.12.3)
Linux (x86_64) release 5.14.21-150400.24.21-default
openSUSE Leap 15.4
Comment 1 Laurent Montel 2022-12-16 05:47:22 UTC 
Do you have a test case please ?
Comment 2 Volker Kuhlmann 2023-04-26 23:53:46 UTC 
You mean an actual email where someone has put a link into the body where the link text in the HTML is the same as the link except with an added space at the end? It wouldn't take more than 5 seconds for anyone to make such an email.
Comment 3 Volker Kuhlmann 2023-04-27 00:31:07 UTC 
Created attachment 158471 [details]
Email with bogus scam warning

Show this email, in kmail - default HTML off.
kmail shows "This message may be a scam. (Details...)" and offers to move it to wastebin.
Details: "This email contains a link which reads as 'https://status.voyager.nz/ ' in the text, but actually points to 'https://status.voyager.nz/'. This is often the case in scam emails to mislead the recipient"

A trailing space in the path part of the link text is not a scam.
Comment 4 Laurent Montel 2023-04-27 05:52:59 UTC 
(In reply to Volker Kuhlmann from comment #2)
> You mean an actual email where someone has put a link into the body where
> the link text in the HTML is the same as the link except with an added space
> at the end? It wouldn't take more than 5 seconds for anyone to make such an
> email.

Yep :) 
but it seems that it takes you more than 5 seconds :)
Thanks