Preventing execution of programs that are embedded in email messages
Systems and methods are presented which generate modified email messages, which are largely devoid of embedded functions, from original email messages, which have embedded functions. The embedded functions are amenable to self-executing codes such as viruses, worms, and Trojan programs. Thus, the modified email message without these embedded functions, and any argument associated with these functions, provides a more secure email environment.
1. A system, comprising:
a memory that stores instructions; and
a processor that executes the instructions to perform operations, the operations comprising:
generating, in response to receiving an indication to display a first email message, a second email message from the first email message, wherein generating the second email message includes:
identifying a start tag within the first email message, the start tag indicating a beginning of an embedded function within the first email message;
identifying an end tag within the first email message, the end tag corresponding to the start tag and indicating an end of the embedded function;
comparing the start tag to a predefined list of tags to exclude; and
excluding the start tag, embedded function, and end tag in the second email message responsive to the start tag being included in the predefined list of tags to exclude; and
displaying the second email message in response to the indication to display the first email message.
2. The system of claim 1 , wherein the embedded function includes self-executing code.
3. The system of claim 1 , wherein the operations further comprise forwarding the first email message in response to receiving a selection to forward the second email message.
4. The system of claim 3 , wherein the operations further comprise forwarding the first email message in response to receiving the selection to forward the second email message without altering contents of the first email message.
5. The system of claim 1 , wherein the predefined list of tags to exclude includes tags that are amenable to self-executing code.
6. The system of claim 5 , wherein the tags that are amenable to self-executing code include a tag indicating that the embedded function is in JavaScript.
7. The system of claim 1 , wherein the operations further comprise receiving the indication to display the first email message based on a cursor being placed over the first email message.
8. The system of claim 1 , wherein the operations further comprise preventing execution of the embedded function.
9. The system of claim 1 , wherein the operations further comprise:
identifying a second start tag within the first email message, the second start tag indicating a beginning of tagged content within the first email message;
identifying a second end tag within the first email message, the second end tag corresponding to the second start tag and indicating an end of the tagged content;
comparing the second start tag to the predefined list of tags to exclude; and
including the second start tag, tagged content, and second end tag in the second email message if the second start tag is not included in the list of tags to exclude.
10. The system of claim 1 , wherein generating the second email message further includes excluding an argument associated with the start tag.
11. The system of claim 1 , wherein the operations further comprise opening an email read window.
12. The system of claim 11 , wherein displaying the second email message comprises displaying the second email message in the email read window.
13. A method, comprising:
generating, in response to receiving an indication to display a first email message, a second email message from the first email message, wherein generating the second email message includes:
identifying a start tag within the first email message, the start tag indicating a beginning of an embedded function within the first email message;
identifying an end tag within the first email message, the end tag corresponding to the start tag and indicating an end of the embedded function;
comparing the start tag to a predefined list of tags to exclude; and
excluding the start tag, embedded function, and end tag in the second email message responsive to the start tag being included in the predefined list of tags to exclude; and
displaying the second email message in response to the indication to display the first email message.
14. The method of claim 13 , wherein the embedded function includes self-executing code.
15. The method of claim 13 , further comprising forwarding the first email message in response to receiving a selection to forward the second email message.
16. The method of claim 13 , further comprising deleting the second email message responsive to user selection of a third email message.
17. The method of claim 13 , wherein generating the second email message further includes excluding an argument associated with the start tag.
18. The method of claim 13 , wherein displaying the second email message comprises providing an email preview pane in an email client.
19. The method of claim 13 , further comprising preventing execution of the embedded function.
20. A non-transitory computer-readable medium comprising instructions, which when executed by a processor, cause the processor to perform operations comprising:
generating, in response to receiving an indication to display a first email message, a second email message from the first email message, wherein generating the second email message includes:
identifying a start tag within the first email message, the start tag indicating a beginning of an embedded function within the first email message;
identifying an end tag within the first email message, the end tag corresponding to the start tag and indicating an end of the embedded function;
comparing the start tag to a predefined list of tags to exclude; and
excluding the start tag, embedded function, and end tag in the second email message responsive to the start tag being included in the predefined list of tags to exclude; and
displaying the second email message in response to the indication to display the first email message.