>The email reader displays your spam/HTML emails out of the box.

Does IRIS support java-script or a subset if it?
If so, please make an option to disable the automatic
loading of external scripts. It would be security-issue.

A HTML-email can load images and stuff from 3rd party sites.
There should also be an option to disable this behavior.

For anything other I've seen so far: very nice work!