Hi,

I am processing Emails through an Email Listener. 

One of the requirements of the proessing is that the body of the incoming email has to be be sent to an DL with some additional information and formatting.

I was using an Correspondence rule to format the outgoing email.

Because of the Correspondence rule, the html tags of the incoming email body are treated as junk characters and appear as such in the email sent out  to the DL.

I decided to use an HTML rule for formatting the email content.

WHen i use the mode="literal" tag for containg the incoming email body, it is throwing an warning says that code is susptible to cross site scripts attack.

How can this issue be resolved.