[quote user="Ellie Kennard"]Hello all,
In the last week my emails from Groupon (html formatted) have started to not be able to be viewed in Pmail.
I am able to right click and view in IE9 in browser, or in FF browser, with no problems. Disabling IERenderer shows the mail contents just fine.[/quote]
I really wonder why currently more and more newsletters or the like start to abuse (I)Frames in email messages: IMO they are not supposed to be there since they open up lots of opportunities for malicious attacks like cross-site scripting and clickjacking: The least thing they do is download external data into an email message which IERenderer will never support.
I admit that the current solution isn't the best (I'm already working on it since I finally figured out another workaround) but it was forced on me by another bug
(IMO)
in IE's rendering machine (not only in IE 9 but also in previous versions) which bypassed all my content control routines if using IFrames. With the current public version you may only enable Allow frames in IERenderer's configuration which will at least prompt you for opening such messages in a browser if encoutering (I)Frames trying to import remote data. Embedded (I)Frames would be displayed like embedded graphics, but you'd
rather
rarely see such messages.
[quote user="Ellie Kennard"]Hello all,
In the last week my emails from Groupon (html formatted) have started to not be able to be viewed in Pmail.
<p>I am able to right click and view in IE9 in browser, or in FF browser, with no problems. Disabling IERenderer shows the mail contents just fine.[/quote]</p><p>I really wonder why currently more and more newsletters or the like start to abuse (I)Frames in email messages: IMO they are not supposed to be there since they open up lots of opportunities for malicious attacks like <a href="http://en.wikipedia.org/wiki/Cross-site_scripting" mce_href="http://en.wikipedia.org/wiki/Cross-site_scripting" target="_blank">cross-site scripting</a> and <a href="http://en.wikipedia.org/wiki/Clickjacking" mce_href="http://en.wikipedia.org/wiki/Clickjacking" target="_blank">clickjacking</a>: The least thing they do is download external data into an email message which IERenderer will never support.</p><p>I admit that the current solution isn't the best (I'm already working on it since I finally figured out another workaround) but it was forced on me by another bug
(IMO)
in IE's rendering machine (not only in IE 9 but also in previous versions) which bypassed all my content control routines if using <a href="http://en.wikipedia.org/wiki/Iframe#Frames" mce_href="http://en.wikipedia.org/wiki/Iframe#Frames" target="_blank">IFrames</a>. With the current public version you may only enable <em>Allow frames</em> in IERenderer's configuration which will at least prompt you for opening such messages in a browser if encoutering (I)Frames trying to import remote data. Embedded (I)Frames would be displayed like embedded graphics, but you'd
rather
rarely see such messages.</p>
Michael
--
IERenderer's Homepage
PGP Key ID (RSA 2048): 0xC45D831B
S/MIME Fingerprint: 94C6B471 0C623088 A5B27701 742B8666 3B7E657C