Can someone modify the Goodmail default player to add their own Javascript code?
No. The Goodmail default player is hosted by Goodmail, not by customers. Any attempt by someone to modify the calling functions within their email results in the message being caught by the checkers at our partner ISPs and webmail providers. This will result in the message not being delivered as a CertifiedEmail message or worse, the message being rejected all together because it didn’t pass our validation.