No. None of they aren. some consume a global variable with a link but that's minor and has irrelevant reasons for the security concerns here. For richmedia, th

No. None of they aren. some consume a global variable with a link but that's minor and has irrelevant reasons for the security concerns here. For richmedia, the publisher (website owner) just accepts to serve a Javascript snipped, which most of the time request more Javascript from places the publisher has no control whatsoever. And it has to be inlined on the page because that script uses document.write like crazy. because of that, the script has total control of the page. That's why there's no rich media in most free email providers. Yahoo is the only one but they render the ad in an crossdomain iframe and force the ad to behave via a richmedia api