Add email HTML sanitization and CSS isolation via Shadow DOM

Spegnimento

14 marzo 2026 alle ore 15:31 UTC

Autore

kamo

Impegno

60400ae

Replace raw dangerouslySetInnerHTML in MessageBrowser with a sanitized email renderer that uses DOMPurify + css-tree for HTML/CSS filtering and a closed Shadow DOM for complete CSS isolation. Prevents email styles from leaking into the site UI.