Allow images and links in Google Caja HTML emails -

i trying display html email in webpage using caja. loading this:

caja.load(document.getelementbyid('messagebox'), undefined, function(frame) {     frame.code(contenturl, 'text/html').run(); }); 

when renders, anchor href , image src tags stripped. cannot see images or click links. guessing default behaviour prevent attacks.

is there way allow html rendered intended, displaying images , having clickable links?

just starting using caja today , links api docs go 404 cannot find info.

thanks

use policy caja.policy.net.all instead of undefined when call load