Original Message:   I can maybe offer a little bit of advice ...
Bones, do you block the string "(left-angular-bracket)script"? Since the body (I presume?) is taken as a HTML and embedded into some kind of enclosing frame, it can (if I am correct?) contain these script blocks as well. These essentially run JavaScript code in the moment when the page renders.

BackReply to this message

 Name

 
 E-Mail
 (optional)
 
 Subject  
 Reply options


 
M
E
S
S
A
G
E

HTML tags allowed in message body.   Browser view     Display HTML as text.
 Link URL
 Link Title
 Image URL