* Sun Sep 21 2008 Kyle Wheeler <kyle-mutt-dev@xxxxxxxxxxxxxx> > It just came to my attention that, at least when auto-viewing html > attachments, mutt uses a predictable filename rather than its usual > secure temporary file creation (e.g. it always uses $TMPDIR/mutt.html to > view html files). > > This seems like a security bug, among other things. Where is this in the > code? Doing a grep for mutt.html didn't show anything in the source... rfc1524_expand_filename -- tamo