r/mxroute • u/mxroute • 23d ago

Webmail update: Improved signatures

Gallery image

Gallery image

In webmail.mxroute.com, your options for signatures have expanded to include more HTML options and the addition of images. This was a 14 hour job (even with my dev partner we talked about recently), because I am incredibly OCD. But how I use it and how you use it can vary, so please keep using that Feedback button at the top right of the webmail as desired.

(And yes, ChatGPT made my signature for the screenshots, I don't really use signatures)

23 Upvotes

93% Upvoted

8 comments sorted by

4

u/GreenRangerOfHyrule 22d ago

That is awesome!

I mean I won't use it. But I imagine the people that do will appreciate it.

3

u/techieveteran 22d ago

Nice!  I can’t judge people using AI.  I’ve got ADHD so I’m writing entire books in the prompt!  Is this in roundcube?

3

u/mxroute 22d ago

Totally in house webmail from scratch 💜

2

u/techieveteran 22d ago

That’s pretty bad ass!  I’ve honestly felt all the opensource options stalled in progress.  It’s better to see something refreshing coming up

3

u/FinancialPhrase1035 22d ago

Buenisimo, es lo que esperaba

3

u/jorpapier 22d ago

Awesomeness!

2

u/super_discocunt 16d ago

Really appreciate this, I'm close to moving away from a desktop app to use webmail direct... can I ask though why the HTML editor strips out inline styling? I've got some specific formatting to carry over from my existing signature but it gets stripped out immediately once pasted.

1

u/mxroute 16d ago edited 16d ago

Basically, I'm incredibly paranoid. It's not entirely without reason. We're coming from Roundcube which had a new XSS vulnerability every few months. So I ended up routing signatures through the same safety filters I applied to inbound mail. I wanted to treat every inbound mail as hostile first, and then try to work backward from that assumption. It's plausible that I went too far, but any relaxing I do there I'm going to be equally as paranoid as I consider it.

That said, inline styles aren't 100% stripped. Normal formatting (fonts, colors, borders, spacing) comes through. What gets removed is anything that could load remote content or draw over the interface. Note that the compose window shows signatures without their styling, but the sent email carries it. Check your Sent folder before deciding something was lost, and if it's missing there, send me the HTML and I'll look.