l

Contact deletion may delete a contact with existing messages

10

Here SQL code checks that the contact is not a member of any chat: https://github.com/deltachat/deltachat-core-rust/blob/a119b24eeb60d38aa95f8cadbd1727eb3b64d9ef/src/contact.rs#L1062-L1066 However, even if the contact is not a member of the chat, they may be...

Use random filenames or hashes for blobstorage

7

Recently there was an accident with a [chatbot](https://github.com/deltachat-bot/chatbot/) that replaced its avatar set from the command line with an unrelated avatar of a contact. Both the `selfavatar` setting and the...

Integrate message parser into the core library

6

Message parser is a crate used by Delta Chat Desktop to parse markdown-like formatting in the messages: https://github.com/deltachat/message-parser It is currently used by Delta Chat Desktop if experimental setting "Render...

Add API to enable/disable accounts in account manager

2

In account manager it should be possible to disable accounts in such a way that they are not started when `dc_accounts_start_io()` is called. It could be implemented as `dc_accounts_enable(account_id: u32,...

No HTML if multiple text parts are cut

2

I have received an email which consists of a short `text/plain` part, long inline `message/rfc822` (forwarded mail) and a `text/plain` attachment. The second part is cut, but "Show Full Message..."...

This is going to be more useful with persistent events #4328 so bridges and bots can track when users join or leave the chat without having to store their view...

This method should return OpenRPC schema: https://spec.open-rpc.org/#service-discovery-method This way `openrpc.json` does not need to be distributed separately, but can be extracted from `deltachat-rpc-server`.

Persistent events

7

Events are stored in memory and may be dropped if the process crashes or if the channel overflows. `Events::new()` creates channels which can only hold up to 1000 messages and...

Failure to publish a package leaves Cargo.toml version updated

1

I ran `cargo release minor`, it updated Cargo.toml from v0.7.0 to v0.8.0 but then failed to actually publish due to network/authentication error. I logged into crates.io and tried to run...

Clarify state of SMTP smuggling attack prevention

2

With the recent news of [SMTP Smuggling](https://sec-consult.com/blog/detail/smtp-smuggling-spoofing-e-mails-worldwide/) attack it would be nice to double-check that Haraka is not vulnerable and clarify it in the docs. From the code it seems...