A new bug discovered in Gmail affects the web app’s user experience by hiding the source address of an email, a situation that comes with an obvious potential for abuse.

Tampering with the ’From:’ header by replacing some text with an <object>, <script> or <img> tag causes the interface to show a blank space instead of the sender’s address.

Källa: New Gmail Bug Allows Sending Messages Anonymously