Body formats, email-safe sanitiser and signature stripper for server-side compose

Shipped

September 25, 2026 at 4:11 AM UTC

Author

Kamo

Commit

8eaf70b

The sanitiser also drops a style attribute that runs code, as it does a style block, and drops <title> and <template> whole: jsoup's Cleaner keeps the text of a tag it removes, so a quoted newsletter would have opened with its title (ruling SP08-T12).