Code inside message

M A Young m.a.young at durham.ac.uk
Thu Sep 7 12:38:25 UTC 2017


On Thu, 7 Sep 2017, Eoin Kim wrote:

> One of managers in my company is getting Google Alert emails daily. On
> arrival, the message shows {Disarmed} in the subject. When he opens the
> message in Outlook, it looks like the whole message content shows up but
> above it, a bunch of JSON codes are showing as well. Are there any related
> configuration in MailScanner regarding this or is this an issue with
> Outlook? Thank you very much.

I suspect the json code is in a <script> block, which Mailscanner disarms 
by renaming it. The result is that the json code becomes visible, but it 
protects against and malicious code in such blocks that might get run.

	Michael Young 


More information about the MailScanner mailing list