[Webkit-unassigned] [Bug 248470] [GTK] The resource ..... was preloaded using link preload but not used within a few seconds from the window's load event. Please make sure it...

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=248470

--- Comment #5 from Michael Catanzaro <mcatanzaro at redhat.com> ---
> The other problem is that it claims the resource *had been preloaded*. I trusted that message, but trying it here, I do not see any sign of the resource download in the access logs of my server, thus maybe the warning lies and nothing was preload at all.

Huh, that sounds like a bug indeed. I would trust your server logs.

> Being there anything preloaded, I'd consider it a security problem, because any attacker/spammer could have such preloads in the document to verify the address is functional and anybody reads the message, despite Evolution controlling the internet traffic by the WebKitGTK API.

I guess we need some way to block preloads. It's expected that web content can preload whatever it wants, and I don't think we have any way to prevent that. But an email client is indeed expected to not allow that.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20230427/6d76dda4/attachment-0001.htm>