original message beyond the normal textthe password gets special html escapes treatment as well though not shown in our examplesthe hidden password field of the generated html screenshot (figure - can look downright bizarre when encryption is applied it turns out that the pop password is still encrypted when placed in hidden fields of the html for securitythey have to be values of page' hidden fields can be seen with browser' view source optionand it' not impossible that the text of this page could be saved to file or intercepted off the net the password is no longer url encoded when put in the hidden fieldhowevereven though it was when it appeared as query parameter at the end of stateful url in the mail list page depending on your encryption modulethe password might now contain nonprintable characters when generated as hidden field value herethe browser doesn' careas long as the field is run through cgi escape like everything else added to the html reply stream the commonhtml module is careful to route all text and headers through cgi escape as the view page is constructed as comparisonfigure - shows what the mail message captured in figure - looks like when viewed in pymailguithe client-side "desktoptkinter-based email tool from in that programmessage parts are listed with the parts button and are extractedsavedand opened with the split buttonwe also get quickaccess buttons to parts and attachments just below the message headers the net effect is similar from an end user' perspective figure - pymailgui viewersame message as figure - reading pop email