Inline previews for PDF attachments

(#1211) Feature Under consideration embeds media

4mo agoby RexSystem edited originally by @itsmeuttu on GitHub

Thread

RexSystem 1 vote 4mo ago originally by @mchaker on GitHub 1 reply

Please do not add this feature. PDFs are known commonly-exploited attack vectors and will cause unnecessary development and maintenance headache. If this is to be added, it should be at the absolute bottom of the priority list, after the product has stabilized for over 2 years.

Permalink

RexSystem 1 vote 4mo ago originally by @mchaker on GitHub

I think embedding is the risk. Please research pdf exploits. Downloading an attachment is fine and already exists in fluxer. This feature sounds too risky especially when a file can already be directly downloaded as an attachment and opened.

Permalink