#22 Display HTML messages safely

open
nobody
None
5
2003-12-12
2003-12-12
James Henderson
No

George Donnelly in 857814 and 851606 requests the display of
HTML messages. This is available in the second beta release.

We delayed adding this feature because of security concerns. In
particular images in web pages can conceal nasty links. The current
view HTML option is taken at the user's own risk. Future versions
should have, for example, the option of turning images off and letting
them download them one by one in each HTML message. Another
issue is that links to stylesheets in the HTML message mess up the
whole screen.

Discussion