> > I don't know what a CGI tag is, but Mozilla does not, or should not,
> > execute anything on the local system if Javascript in Mail and News is
> > turned off. (Is this right?)
> > > Gerv
>
> I am not an expert, but this has nothing to do with JAVASCRIPT. I know
> that cgi-tags in HTML enriched E-Mails may contain malicous code, which
> for example sends back your E-Mail address to a third party server (this
> requires to "click" on the the tag). All I know is "BE VARY CAREFUL WHEN
> RECEIVING HTML ENRICHED MAILS"!
Not in Mozilla. As far as I know (and I think I probably would know)
there's no such thing as a CGI tag. And, even if there was, Mozilla takes
(or should take) the approach of asking you before executing things on
your behalf.
Gerv