thunderbird/thunderbird-android

Checklist I have used the search function to see if someone else has already submitted the same bug report. I will describe the problem with as much detail as possible. App Thunderbird for Android App version Debug build from current main. Affects all build variants that register DemoAutoDiscovery: Thunderbird debug and daily (DebugConfig.kt, DailyConfig.kt) and K-9 Mail debug. Beta and release builds are not affected. Where did you get the app from? Other (self-built from source) Android version Android 15 (emulator, API 35) Device model Android Emulator (Pixel) Steps to reproduce Start account setup and tap "Add an email account" Enter an @example.com address (e.g. [email protected]) and tap Next Auto-discovery shows "Configuration found" (provided by DemoAutoDiscovery) Expand the result and tap "Edit configuration" Expected behavior The incoming server settings screen opens (e.g. with manual configuration defaults), or the option is not offered for the demo configuration. Actua

Description When a data class is NOT annotated with @PiiSafe.HasPii, the FIR checker HasPiiRequiresAnnotatedPropertyChecker verifies if any of its properties are annotated with @PiiSafe.HasPii. However, it is missing checking the Type Arguments as well, leaving the following scenario prone to leaking PII: @PiiSafe.HasPii data class MessageAddress( @get:PiiSafe.Mask val value: String, val label: String, ) data class MessageEnvelope( val subject: String, val from: List<MessageAddress>, ... ) Expected behaviour Build should fail with the following message: > Task :feature:mail:message:api:compileKotlinJvm FAILED e: file:///<file-path>/MessageEnvelope.kt:22:5 This class holds a property of a type annotated @PiiSafe.HasPii; this class must also be annotated @PiiSafe.HasPii. (In case of enabled) IDE should mark the properties whose type argument is annotated with @PiiSafe.HasPii as an error, showing the above-mentioned message Actual behaviour The build succe

Checklist I have used the search function to see if someone else has already submitted the same bug report. I will describe the problem with as much detail as possible. App K-9 Mail App version 22.0 Where did you get the app from? F-Droid Android version not relevant Device model not relevant Steps to reproduce K-9 does not do a good job at showing the details of the sender (From) of an email. This has security implications as it enables phishing to a great extent, as the receiver cannot really see where the email came from. Here is a real example: The redacted header of the email is: Return-Path: <[email protected]> Authentication-Results: someserver.de; dkim=none; spf=pass smtp.mailfrom= SRS0=3DulPS=3DG3=3Dleadingcorporatechanger.de=3Dinfo@srs2.someserver.de; dmarc=fail header.from=mydomain.net policy.dmarc=none; iprev=pass policy.iprev=123.321.111.222 Received: from mout.someserver.de ([123.321.111.222]) by mx.someserver.de (mx

Following our Module Structure documentation, we should split :feature:mail:message:composer into api and internal modules

Checklist I have used the search function to see if someone else has already submitted the same bug report. I will describe the problem with as much detail as possible. App Thunderbird for Android App version 18.0b2 Where did you get the app from? F-Droid Android version 12 Device model No response Steps to reproduce Make sure you have 2 identities, one of which is the default. Turn off your device's network. Compose and send a mail with an identity that's not the default. Find the mail in the sending box, and choose "edit as new mail". Hit send button. View mail in sending box. Expected behavior The mail uses the identity that's not the default. Actual behavior The mail uses the default identity. Logs No response