Re: LYNX-DEV Added mailcc restriction to Lynx 2.7

[Wayne Buttles]

On Tue, 15 Apr 1997, Foteos Macrides wrote:

> Al Gilman <address@hidden> wrote:
> >  From: root <address@hidden>
> >  
> >  I have added the restriction=mailcc to prevent the use of Cc: in any
> >  mailto: URLs.  This was a problem for the guest account use of Lynx at
> >  DANEnet (http://danenet.wicip.org).  We want to allow for mailto: to be
> >  sent, but the Cc: would allow for more general mail to be sent.
> >  
> >What is your model of mailto: that makes it desirable and cc: undesirable?
> 
>       The objective appears to be blocking ability to send mail to
> arbitrary addresses, as opposed to ones occurring as mailto HREFs
> or ACTIONs in documents, no matter how many recipients are specified
> in the document-derived mailto links.

Having receintly been on the other side of the network security fence
(aka, a student ;-), I can tell you than ANY access to mailto leaves
potential for the undesired result.  Almost any guest-book will allow me
to write my own mailto url on the fly.  Is trapping cc really worth it?

Wayne

;
; To UNSUBSCRIBE:  Send a mail message to address@hidden
;                  with "unsubscribe lynx-dev" (without the
;                  quotation marks) on a line by itself.
;