When someone replies to an eBay message via email instead of the messaging interface, eBay messaging dumps all of the CSS code from the email into the message. Seems to only be from Yahoo email AFAICT.
Small code snippet here from such a message.
@media only screen and (max-width: 620px) { #replybody1[yahoo] .v1device-width { width: 450px !important } #replybody1[yahoo] .v1threeColumns { width: 140px !important } #replybody1[yahoo] .v1threeColumnsTd { padding: 10px 4px !important } #replybody1[yahoo] .v1fourColumns { width: 225px !important } #replybody1[yahoo] .v1fourColumnsLast { width: 225px !important } #replybody1[yahoo] .v1fourColumnsTd { padding: 10px 0px !important } #replybody1[yahoo] .v1fourColumnsPad { padding: 0 0 0 0 !important } #replybody1[yahoo] .v1secondary-product-image { width: 200px !important; height: 200px !important } #replybody1[yahoo] .v1center { text-align: center !important } #replybody1[yahoo]
The problem this causes is mail systems block or move to Junk, messages that contain code blocks like this.
We have to look into the Junk folder constantly for messages like this. Please remove the extra CSS inserted into messages by mail clients. I imagine if it's allowing code through like this what's to stop someone from injecting bad code.
