That's surely a bug. Dave sent his message as plain/text and
SmarterMail should be replacing the brackets with HTML encoding before
displaying it as HTML so that it should not be a functional element when
displayed., i.e.
<meta http-equiv="Refresh" content="5;
URL=http://www.mydomain.com">
If Dave had sent it as an HTML message, his client would have done the
replacement for him.
This should probably be reported to SmarterMail. There are a lot of
potential consequences, for instance, virus scanners won't generally
consider code in plain/text segments to be executable, yet it can be in
SmarterMail webmail if it is working the way that you reported.
Matt
Gary Steiner wrote:
It is interesting how SmarterMail's web mail interprets Dave's message. It
sees the META statement in his message as embedded code, and runs it when I
read the message.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
