JS is disabled for email views. I know of no clients that let emails execute js, not to mention executing it from external files.

As for remote images, no plans to disable them right now. I am trying to keep the changes I do to OWB minimal...