Would be nice to have a User Preferences option to
strip out all HTML from emails (perhaps optionally
just the most harmful stuff such as JavaScript?).
Can't think if this would involve a conversion routine
to make the plain text, or whether merely replacing
all tagged sections with "[HTML removed by NOCC]"
would be sufficient.
I don't know what stripping you do at the moment, but
I did just try sending myself an email with a META
REFRESH command in it, which did get executed by M$IE,
albeit badly!
Thanks in advance for any info
- Martin Johnson
England
Logged In: YES
user_id=29685
we already strip every vbscript and javascript, we didn't
think of meta http tags though.
See the function remove_stuff() on
http://cvs.sourceforge.net/cgi-bin/viewcvs.cgi/nocc/nocc/webmail/functions.php?rev=1.128&content-type=text/vnd.viewcvs-markup
Logged In: YES
user_id=529507
META tags outside the HEAD block are now stripped from the
mail source. META tags inside the HEAD block were previously
stripped with this block.