aboutsummaryrefslogtreecommitdiffstats
path: root/src/requestinterceptor.h
AgeCommit message (Collapse)AuthorFilesLines
37 hoursfix: scope qtmaildir: allow to the exact document base URLDanilo M.1-1/+16
Whole-scheme allow meant a hostile message body could reference any qtmaildir: URL (e.g. <img src="qtmaildir://other">) and have it pass, with safety depending entirely on Task 11's still-unwritten scheme handler. Add setDocumentUrl() and require an exact QUrl match; deny all qtmaildir: URLs when it is unset (fail closed). Document URL survives resetForNewMessage() since it is a property of the view, not of a message.
37 hoursfeat: add deny-by-default web request interceptorDanilo M.1-0/+42