From e859c40916c1bddceb1deac20a56fe08f7e6c6ae Mon Sep 17 00:00:00 2001 From: Samuel FORESTIER Date: Sat, 7 Nov 2020 19:00:33 +0100 Subject: [PATCH] [CARDBOOK] Prevent contacts display names leakages in recipients list --- user.js | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/user.js b/user.js index 97a3023..208ce42 100644 --- a/user.js +++ b/user.js @@ -1505,6 +1505,11 @@ user_pref("mailnews.display.date_senders_timezone", false); * Consider using https://addons.thunderbird.net/addon/cardbook instead ***/ user_pref("mail.collect_addressbook", ""); // [DEFAULT: "jsaddrbook://history.sqlite"] user_pref("mail.collect_email_address_outgoing", false); +/* 6031: Only use email addresses, without their Display Names [CARDBOOK] [SETUP-FEATURE] + * By default, CardBook extension incorporates contacts display names in addresses fields. + * This could leak sensitive information to all recipients. + * [SETTING] CardBook>Preferences>Email>Sending Emails>Only use email addresses, ... ***/ +user_pref("extensions.cardbook.useOnlyEmail", true); /*** [SECTION 6100]: EMAIL COMPOSITION (ENCODING / FORMAT / VIEW) Options that relate to composition, formatting and viewing email