RE: Checking for email attachment name for containing Javscript code that could get potentially executed when displayed on a webpage.

[Benny Pedersen]

John Hardin skrev den 2013-03-08 20:31:

This is a simple, standard and robust solution to your problem that
also prevents other attack vectors you haven't thought of yet.

if php build with tidy its simple :)