> You can’t allow some arbitrary code to run in the user’s mail client, we already have enough security problems in emails. Webmail aside, what are the securit

> You can’t allow some arbitrary code to run in the user’s mail client, we already have enough security problems in emails. Webmail aside, what are the security implications of running javascript in an email client? Any reason why they're worse than going to a web page? (You might say you choose which web pages you go to, whereas email gets sent to you. But with all the 3rd-party advertising javascript, you end up running a lot of arbitrary code while browsing)