[Bug]: Dragging and dropping images into a Compose email window doesnt drop them inline in email as expected

[joolsr]

Description

According to the features explanation, it should be possible to drag an image from file manager into the Compose Email window, and for image to be inserted inline.

Instead when doing this the image is attached to the email, and a image placeholder is shown of broken image

In browser console following is show:-

Content-Security-Policy: The page’s settings blocked the loading of a resource (img-src) at blob:https://xxxxxxx.io/ac8cc9d4-ad89-495b-b91a-63b1d237b014 because it violates the following directive: “img-src 'self' data: https:”

Also tested in Windows 11 and Chrome, but get exactly same issue

The image used is just a simple 50kB jpg

Steps to Reproduce

1. Drag an image from file browser, in this case KDE plasma, but Windows is the same, into a Compose Email window.
2. The image gets attached instead of being inserted in the chosen location in the body of the email.
3. The image placeholder is shown, of a blank email.

Expected Behavior

image is inserted inline in image at cursor point

Actual Behavior

image is added to email as an attachment.

Console shows following:-

Content-Security-Policy: The page’s settings blocked the loading of a resource (img-src) at blob:https://xxxxxxx.io/ac8cc9d4-ad89-495b-b91a-63b1d237b014 because it violates the following directive: “img-src 'self' data: https:”

Bulwark Version

main

Stalwart Mail Server Version

0.14

Browser

Chrome / Chromium

Operating System

None

Screenshots / Screen Recording

Relevant Logs or Error Output

Content-Security-Policy: The page’s settings blocked the loading of a resource (img-src) at blob:https://xxxxxxx.io/ac8cc9d4-ad89-495b-b91a-63b1d237b014 because it violates the following directive: “img-src 'self' data: https:”

Additional Context

No response

[chrilep]

@rathlinus this is related to the blob cors topic we had on discord today.

[joolsr]

happy to provide any further help in debugging this .. ;-)

[rathlinus]

Yeah, i already have that on my list of things to fix

[chrilep]

You can't. Security was hardened a bit too much... 😄

[joolsr]

Thanks for fix, but after testing there's still an issue. I can now drag and drop image into composer window, but when i send an email, the image isn't rendered correctly in the body of the image. It either shows as a broken image, or as an attachment depending on email client.

[rathlinus]

please try again