« Users Thwarted in Attempt to Report HTML Mail Security Flaws | Main | CTDATA User Account Password Policies »

Disable JavaScript in Email to Avoid Disclosure of Message Contents

In light of the reports circulating around the Internet regarding the major mail readers' mishandling of JavaScript in messages containing HTML, CTDATA recommends that all customers disable execution of JavaScript in Email messages.

Read on for more details....

JavaScript may be disabled within email read by Netscape Communicator as follows:

  1. Choose "Preferences" from the "Edit" menu.
  2. Click on the "Advanced" item on the left hand pane of the Preferences window. (It is not necessary to expand the "Advanced" item to reveal the items beneath it in the hierarchy.)
  3. De-select the check box labeled "Enable JavaScript for Mail and News".

CTDATA does not recommend use of Microsoft Outlook or Outlook Express because those mail readers have been exploited repeatedly by viruses and trojan horses. In spite of this, we shall provide instructions to disable JavaScript in Email messages. Those instructions are not available at this time.

Post a comment

(If you haven't left a comment here before, you may need to be approved by the site owner before your comment will appear. Until then, it won't appear on the entry. Thanks for waiting.)


CTDATA Venutures (CTDATA) develops Internet and Intranet applications for corporations and non profit organizations. Our services include:

  • Consulting services for Movable Type and TypePad-based publishing systems (visit our Weblog Improvement website for more information),
  • Financial services business process consulting,
  • Content management system and knowledge management system consulting,
  • Apache web server engineering and hosting,
  • MySQL, Sybase, and Microsoft SQL Server architecture and development,
  • SOAP, REST, and XML-RPC system architecture and programming, including Amazon Web Services and
  • Weblog publishing.
For more information, contact Dave Aiello by email at dave [at] daveaiello.com or call him at +1-267-352-4420.
Copyright © 1995-2010, CTDATA Ventures. All Rights Reserved.
Powered by
Movable Type 4.25