Add email HTML sanitization and CSS isolation via Shadow DOM

Shipped: March 14, 2026 at 3:31 PM UTC
Author: kamo
Commit: 60400ae

Replace raw dangerouslySetInnerHTML in MessageBrowser with a sanitized email renderer that uses DOMPurify + css-tree for HTML/CSS filtering and a closed Shadow DOM for complete CSS isolation. Prevents email styles from leaking into the site UI.

All changes

Like what you see shipping?

Every one of these updates lands in your workspace automatically. Start free and watch it grow week after week.

Start Free Forever View Pricing