Add email HTML sanitization and CSS isolation via Shadow DOM

Shipped

2026年3月14日 15:31 UTC

Author

kamo

Commit

60400ae

Replace raw dangerouslySetInnerHTML in MessageBrowser with a sanitized email renderer that uses DOMPurify + css-tree for HTML/CSS filtering and a closed Shadow DOM for complete CSS isolation. Prevents email styles from leaking into the site UI.