Limited time MSExchange.org offer! -- 1.Sep.2008 1:00:00 PM
TechGenix and SolarWinds have partnered to provide free copies of SolarWinds Exchange Monitor to all visitors who join the MSExchange.org Forums. SolarWinds Exchange Monitor is a handy desktop dashboard that continuously monitors Microsoft Exchange to deliver real-time insight into Exchange services, mail queue sizes, and host server health. Learn more about Exchange Monitor and the free offer!
OWA Stripping Required Content In HTML Attachment - 6.Nov.2007 6:29:17 PM
Is there a way to disable "Safe HTML Content Filtering" in Exchange 2007? Specific HTML attachments downloaded / opened from OWA have portions missing. I noticed this Exchange 2003 article... http://support.microsoft.com/kb/912939/
"Safe HTML" filtering was introduced in Outlook Web Access for Exchange Server 2003 to help protect users from malicious script and from certain HTML elements. The malicious script or the HTML element may run when the recipient opens the e-mail message or the attachment. Alternatively, the malicious script or the HTML element may run when the recipient takes an action such as clicking a link that is in the e-mail message.
Outlook Web Access filters out all potentially unsafe content from the e-mail message or from the attachment. Outlook Web Access also removes all scripts and elements or attributes that can reference a script. HTML forms and some other kinds of elements are also affected by the "Safe HTML" modifications that are made by Outlook Web Access.
The filtering in Outlook Web Access for Exchange Server 2003 is more rigorous than the filtering in Microsoft Office Outlook 2003. The reason is that the Outlook Web Access browser interface has more security requirements than the Outlook 2003 interface. Even if an e-mail message appears to be unmodified in Outlook 2003, that same e-mail message may be missing content when you view the message in Outlook Web Access.
The "Safe HTML" features in Outlook Web Access for Exchange Server 2003 may sometimes cause one or more of the following: However, the "Safe HTML" features help provide a safer e-mailing environment for users. ----------------
Having seen all this, I'd still like to disable it. Is this possible? Keep in mind that I have Exchange 2007.
We are having the same problem with javascript enbeded inside html with Owa 2007. Have been trying for about 2 weeks to find a solution but nothing yet.
Would be interested to see if any comes up with anything...
What's also interesting is that the attachment remains intact. It's only when the attachment is opened / downloaded from the owa interface that the content gets stripped.
I must confess that I'm confused on why this is a seemingly forced "feature".