The whole thing your friend sent is fine, words and all.
What this page does
A message from Covert Mail is the code's name, the coded text and,
if the sender chose, the key, packed into one line that starts
cm1.. This page unpacks it in your browser. Nothing you
paste is sent anywhere, and a link that opens this page carries the
message after the #, which browsers never send to a server.