[Users] Fancy loads link even though not wanted

[Thorsten Maerz]

Am Sat, 6 Mar 2021 09:00:48 -0000
schrieb Paul <claws at thewildbeast.co.uk>:

> On Fri, 5 Mar 2021 21:08:53 +0100
> Johan Vromans <jvromans at squirrel.nl> wrote: 
> 
> > Nevertheless I have a message that, when opened, immedeately
> > activates a link in my browser. How can this happen?
> > 
> > I suspect this piece of the message:
> > 
> > <iframe width="560" height="315" frameborder="0" 
> >  src="https://www.youtube.com/embed/P9gz32TJeCI?start=110"
> >  allow="accelerometer; autoplay; clipboard-write; encrypted-media;
> > gyroscope; picture-in-picture" allowfullscreen=""></iframe>  
> > 
> > The sender is thrustworthy. Full message attached.  
> 
> I can verify the behaviour, and also think the problem is in the
> handling of iframes.

In a former HTML-plugin (based on Mozilla, win32 only), I prevented any
outgoing traffic by passing a proxy configuration to it.
That "proxy" was a socket opened by the plugin, with the only purpose to
reply everything with "404 Not found".

Would that be an option?

-- 
Best regards,
Thorsten