Thanks for the work you’ve done on this. I still have an XSS problem though.
For a while using 1.4.3 there were no issues as such. But now using 1.4.5 I still have XSS problems using Outlook from my computer – but it does send from Gmail.
I assume something to do with a code that Outlook is putting in the header?
