diff --git a/meson.build b/meson.build
index 53061a10..1bb0edc8 100644
--- a/meson.build
+++ b/meson.build
@@ -61,7 +61,7 @@ add_project_arguments([
 
 target_glib = '2.54' # Also passed to valac, so don't include a point rev
 target_gtk = '3.24.7'
-target_webkit = '2.20'
+target_webkit = '2.24'
 
 # Primary deps
 glib = dependency('glib-2.0', version: '>=' + target_glib)
diff --git a/src/client/components/client-web-view.vala b/src/client/components/client-web-view.vala
index 7c71db58..053c263f 100644
--- a/src/client/components/client-web-view.vala
+++ b/src/client/components/client-web-view.vala
@@ -305,6 +305,7 @@ public abstract class ClientWebView : WebKit.WebView, Geary.BaseInterface {
         setts.enable_html5_local_storage = false;
         setts.enable_java = false;
         setts.enable_javascript = true;
+        setts.enable_javascript_markup = false;
         setts.enable_media_stream = false;
         setts.enable_offline_web_application_cache = false;
         setts.enable_page_cache = false;