10. A method of preventing cross-site scripting, the method comprising: parsing an HTML e-mail message to create a document object model (DOM) tree wherein the DOM tree includes a plurality of branches, the plurality of branches including at least one branch having only known elements; utilizing a model hook of an e-mail program to derive a normal element filter; applying the normal element filter to the DOM tree, the filter executing as a plug-in in a browser in a computing device; creating a modified DOM tree wherein the at least one branch having only known elements is excluded from the DOM tree and wherein the excluding of the at least one branch from the DOM tree is performed such that remaining branches of the DOM tree are still connected with one another; and applying a script analyzer filter to the modified DOM tree to create a final DOM tree having only unknown element types.
10. A method of preventing cross-site scripting, the method comprising: parsing an HTML e-mail message to create a document object model (DOM) tree wherein the DOM tree includes a plurality of branches, the plurality of branches including at least one branch having only known elements; utilizing a model hook of an e-mail program to derive a normal element filter; applying the normal element filter to the DOM tree, the filter executing as a plug-in in a browser in a computing device; creating a modified DOM tree wherein the at least one branch having only known elements is excluded from the DOM tree and wherein the excluding of the at least one branch from the DOM tree is performed such that remaining branches of the DOM tree are still connected with one another; and applying a script analyzer filter to the modified DOM tree to create a final DOM tree having only unknown element types. 17. A method as recited in claim 10 wherein the model hook has a user-defined template and an e-mail program template.