Allow IFRAME in email

having trouble undoing the security lockdown

[Slud]

An internal application of ours sends out email that includes a form and a blank iframe. Submitting the form should open the result page in the IFRAME, but instead it pops up in a new window.

I've set the security as lax as possible, but still no luck.

Any ideas?

(Note that the email works as intended if it's saved to the desktop as HTML.)

[korkus2000]

What email programs does it not work in?

[Slud]

Both Outlook and Outlook Express (on Windows XP) seem to use the same security settings configuration menu. I haven't been able to get either one to work.

I can find a ton of articles on disabling IFRAME to protect against viruses, but decreasing the security settings doesn't seem to let IFRAME's work either.

[txbakers]

Personally I'm glad it isn't working.

I HATE html email, and i frames in particular really annoy me.

Send me email in Plain text and maybe I'll read it. HTML ads in my box get deleted immediately.

[tedster]

I understand your frustration here - I've just done a lot searching on this myself. For almost a year everyone has been very focused on blocking the iframe security hole. But there is almost nothing out there about allowing iframes in email after the security patches are applied.

The only hint I've found comes on this Outlook Developer's Page [msdn.microsoft.com] from Microsoft. It seems to say that Outlook security is set separately from IE's security, and by default it's set to a "Restricted Zone".

Maybe you can find an idea on that page that will help you.