CS file from download marked as UNSAFE ATTACHMENT

  • Resolved noemindesign

    (@noemindesign)


    3 years, 9 months ago

    When a user downloads the .ICS file then uses it on their calendar- they are getting a warning that it is an unsafe attachment.

    I am having a similar issue to this:(except theirs is an image)

    https://theeventscalendar.com/support/forums/topic/ics-file-warning-unsafe-attachment/

    However, I am using SSL and this ticket never seemed to have been resolved.

    It is an error after they download it and then import it into their calendar.

    You can view the error message here:
    https://turningoftheages.com/wp-content/uploads/2022/08/screenshot-error.png

    Also see below:::

    This item contains attachments that are potentially unsafe. You may not be able to view these attachments after you close the item. Do you want to close this item anyway? For more information on unsafe attachments, see the help topic on “Unsafe Attachments”.

    This warning appears any time that calendar item is opened, not just when one downloads. So if I click on the item in my calendar, this warning resurfaces. I suspect this is a feature of the ‘export’ feature, as I never see this message when I download reminders for my calendar, such as with the typical Zoom registrations. I’ll attach a copy of what this looks like for your appreciation.

    • This topic was modified 3 years, 9 months ago by noemindesign.
    • This topic was modified 3 years, 9 months ago by noemindesign.

    The page I need help with: [log in to see the link]

Viewing 6 replies - 1 through 6 (of 6 total)
  • Plugin Support WilloftheD

    (@abzlevelup)

    3 years, 9 months ago

    Hi @noemindesign, appreciate you providing more details here. This would require knowledge of PHP to implement. I reached out to one of our devs saying:

    They can use the tribe_ical_feed_item_thumbnail filter to remove the image entry. The image should really be using the new IMAGE prop instead of an attachment. Something like IMAGE;VALUE=URI;DISPLAY=THUMBNAIL;FMTTYPE=image/png:http://example.com/images/party.png

    Here are some references that would help.
    https://icalendar.org/New-Properties-for-iCalendar-RFC-7986/6-1-display-property-parameter.html
    and
    https://icalendar.org/New-Properties-for-iCalendar-RFC-7986/5-10-image-property.html.

    Let us know how it goes.

    Best,
    Abz

    Thread Starter noemindesign

    (@noemindesign)

    3 years, 9 months ago

    Hi,

    Thank you for the reply. I just want to be 100% clear that my message was understood. I AM NOT having any issues with images- the response you gave me was in reference to images. That was in reguards to the example I sent. MY ISSUE has to deal with the ICS file (for the calendar) – there are no images involved.

    There is no error from the website. It is only after the user downloads the .ICS file and they upload to their calendar- microsoft outlook gives them the unsafe warning.

    Please help!

    Plugin Support WilloftheD

    (@abzlevelup)

    3 years, 9 months ago

    Hi @noemindesign, thanks for confirming. Yes, we tested it out with or without attachment and we’re now investigating more of this. It seems like this only happens with Microsoft Outlook ICS. This is the first time we heard about this and we appreciate you bringing this to our attention.

    As of now we’re still figuring it out and see if we could come up with a hotfix or workaround for this. Please note that this might take a while, but rest assured that we would notify you in this thread whenever there are updates.

    Apologies for the inconvenience we’d get back to you.

    Best,
    Abz

    Thread Starter noemindesign

    (@noemindesign)

    3 years, 9 months ago

    @abzlevelup – Thank you for your response & attention to this matter. I will keep an eye out on here for any updates. Really appreciate the support!

    Plugin Support WilloftheD

    (@abzlevelup)

    3 years, 9 months ago

    Hi @noemindesign, no worries. We’re here to help. One of my colleagues will be testing it out further this week. I would update you when I know more.

    Have a great week ahead.

    Best,
    Abz

    Plugin Support WilloftheD

    (@abzlevelup)

    3 years, 9 months ago

    Hi @noemindesign, I heard back from my colleague and he was able to replicate it. We already created an internal bug ticket for this, and I have added your case to it. Thanks for all the details, I will definitely pass it along to our devs.

    I am unable to provide an exact date or time estimate for when this bug will be fixed, but you’ll be notified when there are any updates.

    Appreciate your patience, and we’re looking forward to helping you solve this. If you do have other concerns or issues you need help with, please create another ticket, as it helps us track different issues.

    Again, thank you for your patience.

    Cheers,
    Abz
    ________________________

    Internal Bug Ticket Reference:
    BTRIA-1316

Viewing 6 replies - 1 through 6 (of 6 total)

The topic ‘CS file from download marked as UNSAFE ATTACHMENT’ is closed to new replies.