RE: HTML interpreter vs. HTML user agent

Larry Masinter wrote:
> Not sure I understand -- does web mail have to turn off scripting?
>
> Is the only HTML that is suitable for transmission by email to
> a web mail user one that doesn't rely on scripting?
>
> How can I email HTML which uses <canvas>, if scripting is turned
> off for web mail users?

I would suggest the only safe thing for webmail to do would be to parse 
the HTML document in question and whitelist elements that are known to 
be safe.  As a result, <canvas> would (hopefully) not work.

Andi

Received on Sunday, 31 May 2009 21:39:14 UTC