Add email HTML sanitization and CSS isolation via Shadow DOM

已装运

2026年3月14日 15:31 UTC

作者

kamo

提交

60400ae

Replace raw dangerouslySetInnerHTML in MessageBrowser with a sanitized email renderer that uses DOMPurify + css-tree for HTML/CSS filtering and a closed Shadow DOM for complete CSS isolation. Prevents email styles from leaking into the site UI.