Re: lynx-dev mailto support

[Heather Stern]

I ate the fortune cookie first, then read what Klaus Weide wrote:
> On Mon, 18 Jan 1999, Chieh Cheng wrote:
> 
> > Lynx does not seem to support the following:

[line broke for clarity]

> > <a href="mailto:address@hidden
> >             subject=test?
> >             address@hidden">test</a>

> > Lynx thinks that the following string is the subject:
> > 
> > address@hidden
> > 
> > and doesn't recognize it as the bcc field.
> 
> That's intentional: from LYMail.c:
> 
>             /*
>              *  Seek and handle cc=address(es) fields.  Excludes
>              *  Bcc=address(es) as unsafe.  We may append our own
>              *  cc (below) as a list for the actual mailing. - FM
>              */
> 
> Presumably this is meant to protect the user from being tricked into
> doing something he/she may not even be aware of, that oh-so-popular
> sport with other browsers.
> 
>    Klaus

It may be intentional, but it's still *broken* - it should delete the
bcc, not blab it into the previous field.  What if someone had some
other field than the inocuous "subject", that lynx considered legal, 
preceding the offending "bcc"?  It shouldn't create opportunities for
illegal settings.

  |                    Ricoh Silicon Valley ADC       address@hidden
->+<-  Heather Stern   Starshine Technical Services   address@hidden
  |
  A successful [software] tool is one that was used to do something undreamed 
  of by its author.    -- S. C. Johnson