"Allow Script Tags" affects attachments?

[Antony Stone]

On Wednesday 01 February 2017 at 21:31:30, Jerry Benton wrote:

> Ok, attachments.
> 
> The should NEVER be script tags in email. This is not how attachments are
> done.

Sorry, am I misunderstanding?

What's to stop me writing an HTML page, containing <script> tags, and then 
sending it as an attachment to someone?

It strikes me as a perfectly legitimate thing to have in an attachment to an 
email "please let me know what you think of this version..." etc.

The question is whether "Allow Script Tags = No" will block this attachment, 
or allow it because the tag is not in the emal body itself.


Antony.

> > On Feb 1, 2017, at 3:29 PM, Antony Stone
> > <Antony.Stone at mailscanner.open.source.it> wrote:
> > 
> > On Wednesday 01 February 2017 at 21:16:51, Jerry Benton wrote:
> >> There should NEVER be scripts tags in email. This is not how images are
> >> inserted.
> > 
> > Surely the question was about script tags in HTML attachments to (plain
> > text or HTML) emails, nothing to do with images...?
> > 
> > 
> > Antony
> > 
> >>> On Feb 1, 2017, at 10:34 AM, Oliver Kutscher <ok at addix.net> wrote:
> >>> 
> >>> Hi,
> >>> 
> >>> I wonder if "Allow Script Tags" is also affecting attachments? So if a
> >>> HTML containing "<script></script>" is attached will the email be
> >>> dropped if "Allow Script Tags" is set to "no"?
> >>> 
> >>> --
> >>> MrLINK

-- 
+++ Divide By Cucumber Error.  Please Reinstall Universe And Reboot +++

                                                   Please reply to the list;
                                                         please *don't* CC me.