E-mail Header Injection Vulnerabilities
Defeating script injection attacks with browser-enforced embedded policies