Malicious code in latest ATLAS (1.32)

[sirinsidiator]

If you are looking into this, you should also think about other functions that can produce an unfavorable outcome for users. Two that come to mind are DestroyItem and SellMount.

I think the dialog should not be necessary for returning a mail to the sender. AFAIK the content of these mails cannot be changed so there shouldn't be a risk in that case or am I missing something?