Version: KMail Version 1.10.92 Using KDE 4.1.87 (KDE 4.1.87 (KDE 4.2 >= 20090101)) "release 3.1" (using Devel) OS: Linux Installed from: Compiled sources That is terribly wrong. Just wrong. Programs sent by email should never be executed. My 50 years old aunt will click on it and will click on "Yes" to execute the script without even reading the message. 1. Get an email with (http|ftp)://server/script.sh 2. Click on the link ( expect save and download here) 3. Get the message: Do you really want to execute (http|ftp)://server/script.sh? 4. Bite the dust with your NOPASSWD suduers file or IRC bot installed on unprivileged port. I am not sure if it is really kmail fault that most probably just passes the link to kdelibs. But isn't it obvious that kmail has to block such things? I am not paranoid, but I don't want to get outlook express back again after 8 years w/o it. So ho pe and you.
I totally agree. Even when I've tried such file it opened me kwrite without asking me what to do with the file (may be because of the mime-type). Kmail should not provide a way to execute linked or attached content.
Fixed with r927077.