Thunderbird:Autoconfiguration:ConfigFileFormat: Difference between revisions

→‎XML: remove login per URL, because no page supports that anymore, to avoid XSS attacks
(→‎XML: <webMail> fixes)
(→‎XML: remove login per URL, because no page supports that anymore, to avoid XSS attacks)
Line 148: Line 148:
           and password himself. -->
           and password himself. -->
       <loginPage url="http://mail.example.com/login/" />
       <loginPage url="http://mail.example.com/login/" />
      <!-- Direct URL where to send username or email address and password
 
          to trigger a log in. Use this to allow a login without the user
          having to re-enter the password every single time.
          This can help e.g. mailcheck extensions that, after showing
          that there is new mail, want to allow to quickly see the mail.
          Only HTTPS is valid here. The client must ignore HTTP urls and
          ensure that the browser verifies the SSL certificate.
          When adding the URL, remember to escape the ampersand between
          params to &amp; for XML -->
      <loginAutomaticURL url="https://mail.example.com/loginScript?email=%EMAILADDRESS%&amp;password=%PASSWORD%" />
       <!-- Same as loginAutomaticDOM, but the website makes checks that
       <!-- Same as loginAutomaticDOM, but the website makes checks that
           the user comes from the login page. So, open the login page
           the user comes from the login page. So, open the login page
Confirmed users
591

edits