Improper detection for `trimmed content` in Gmail results to loading entire conversation

[martgil]

Looks like the FlowCrypt browser extension is lacking the detection of the Show trimmed content in Gmail:

When the user receives an encrypted message sent via ECP, and have a few exchanges of message, the receiving user of that message will see the entire conversation thread from which the extension process as it includes the encrypted message. But it should rather not rendering the entire conversation when the encrypted message sent via ECP was already hidden in Show trimmed content.

This issue results to loading the entire conversation if an encrypted message is there:

Affected version

FlowCrypt browser extension 8.5.10

Steps to reproduce

1. Visit https://mail.google.com/mail/u/human@flowcrypt.com/#inbox/FMfcgzQZTMLpRGvvTXMjcBsRBqzWVCXw
2. Open the first thread to see the encrypted message
3. Now check other email sent by the sender and it includes entire conversation.

Most important to notice is that, .message_inner_body.evaluated not only not detects the Show trimmed content but changes the font in gmail too resulting to not-so-loooking-good ui.

[martgil]

The browser I'm using is Brave at latest version.

[martgil]

A remedy not to see the entire conversation is by disabling the FlowCrypt browser extension completely so it will go back to normal UI where FlowCrypt will not process the trimmed content going forward.

[martgil]

@ioanmo226, Thanks for checking this. I'll be forwarding to you the exact email that reproduce the issue and hopefully you'll be able to see it as well.

It look something like this:

From which, the extensions would try to render the previous emails. eg ------Forwarded message------ delimiter.

[martgil]

Yout mean ---------- Forwarded message --------- should be inside trimmed content or extension should decrypt it?

Sorry for not being clear, @ioanmo226 . The extension tried to decrypt the previous message it found on an quoted/trimmed content.

When tried to observed, upon opening the email, it should not be rendered with large text and should recognized as plain text. But instead, it'll recognized as a "FlowCrypt message" with at the end of the email is the FlowCrypt-recognizable message.

.

And therefore, does not ends with:

So in conclusion, it straight up tries to render/recognized the last email that contains a encrypted message instead of just showing it as plain if it has encrypted message on the quoted/trimmed content.

[martgil]

You mean we should skip decrypting messages inside quoted or trimmed content and just display them as plain text?

In my opinion yes. It kindof hard to read when the formmating to quoted or trimmed content messed up a bit when it tried to recognize the encrypted email in trimmed content of a plain email...

@sosnovsky Do you also see this issue as an inconvenience when reading the same email from https://mail.google.com/mail/u/human@flowcrypt.com/#inbox/FMfcgzQZTMLpRGvvTXMjcBsRBqzWVCXw?