An addons.thunderbird.net reviewer pointed out that innerHTML.replace() is risky, and textContent.replace() would be better. Instead of one big replace on the body contents, we now recursively do replacements on each text node and node attribute.