HTML in imported email

I'd be very careful displaying HTML that you don't generate. It is trivial to embed javascript sniffers and other goodies that could endanger your app. Check out the white_list plugin which allows stripping certain html tags:

http://svn.techno-weenie.net/projects/plugins/white_list

Hope this helps.