Bug 485922

Summary:	KMail is trying to load external resource of the message despite it being disabled
Product:	[Applications] kmail2	Reporter:	beanbo <ambean>
Component:	general	Assignee:	kdepim bugs <kdepim-bugs>
Status:	REPORTED ---
Severity:	normal
Priority:	NOR
Version First Reported In:	6.0.2
Target Milestone:	---
Platform:	Arch Linux
OS:	Linux
Latest Commit:		Version Fixed In:
Sentry Crash Report:
Attachments:	KMail leak

Description beanbo 2024-04-21 20:36:09 UTC

SUMMARY
KMail ignores "Allow messages to load external references from the Internet" setting in some rare circumstances.

STEPS TO REPRODUCE
1. Make sure you have a firewall or some other method to see the outgoing connections
2. Go to setting and disable the setting "Allow messages to load external references from the Internet"
3. Go to message list and preview HTML message which contains the following code inside <body> section:
<link href="https://fonts.gstatic.com" rel="preconnect">

OBSERVED RESULT
There is a connection attempt to fonts.gstatic.com:443

EXPECTED RESULT
No connection attempt should be initiated

SOFTWARE/OS VERSIONS
Linux/KDE Plasma: Arch Linux, up to date
KDE Frameworks Version: 6.1.0
Qt Version: 6.7.0
Wayland session

ADDITIONAL INFORMATION
I found the same problem with the same email message in Evolution (reported in their bug tracker).

Comment 1 beanbo 2024-04-21 20:44:39 UTC

Created attachment 168766 [details]
KMail leak

Comment 2 beanbo 2024-04-22 20:12:51 UTC

this issue might be a part of the following problem: https://bugs.webkit.org/show_bug.cgi?id=259787