Encryption only verifies it hasn't been changed or viewed by a third party, the original email contained the problem so you would just store an encrypted string

Encryption only verifies it hasn't been changed or viewed by a third party, the original email contained the problem so you would just store an encrypted string that would decrypt with the attack in it