[geary/wip/disable-js] Explicitly disable parsing JavaScript markup in email bodies

[Michael Gratton <mjog src gnome org>]

commit 597e6d7d8ab32e374671450c9845105dbb4d02bc
Author: Michael Gratton <mike vee net>
Date:   Sat Sep 7 19:17:32 2019 +1000

    Explicitly disable parsing JavaScript markup in email bodies
    
    Fixes #78, https://bugzilla.gnome.org/show_bug.cgi?id=713656

 meson.build                                | 2 +-
 src/client/components/client-web-view.vala | 1 +
 2 files changed, 2 insertions(+), 1 deletion(-)
---
diff --git a/meson.build b/meson.build
index 53061a10..1bb0edc8 100644
--- a/meson.build
+++ b/meson.build
@@ -61,7 +61,7 @@ add_project_arguments([
 
 target_glib = '2.54' # Also passed to valac, so don't include a point rev
 target_gtk = '3.24.7'
-target_webkit = '2.20'
+target_webkit = '2.24'
 
 # Primary deps
 glib = dependency('glib-2.0', version: '>=' + target_glib)
diff --git a/src/client/components/client-web-view.vala b/src/client/components/client-web-view.vala
index 7c71db58..053c263f 100644
--- a/src/client/components/client-web-view.vala
+++ b/src/client/components/client-web-view.vala
@@ -305,6 +305,7 @@ public abstract class ClientWebView : WebKit.WebView, Geary.BaseInterface {
         setts.enable_html5_local_storage = false;
         setts.enable_java = false;
         setts.enable_javascript = true;
+        setts.enable_javascript_markup = false;
         setts.enable_media_stream = false;
         setts.enable_offline_web_application_cache = false;
         setts.enable_page_cache = false;