Simon Ser
4 years ago
No known key found for this signature in database
GPG Key ID: FDE7BE0E88F5E48
2 changed files with
3 additions and
1 deletions
-
plugins/base/public/message.html
-
plugins/base/routes.go
|
|
|
@@ -115,7 +115,8 @@ |
|
|
|
{{if .IsHTML}} |
|
|
|
<!-- TODO: add a src fallback --> |
|
|
|
<!-- allow-same-origin is required to resize the frame with its content --> |
|
|
|
<iframe id="email-frame" srcdoc="{{.Body}}" sandbox="allow-same-origin"></iframe> |
|
|
|
<!-- allow-popups is required for target="_blank" links --> |
|
|
|
<iframe id="email-frame" srcdoc="{{.Body}}" sandbox="allow-same-origin allow-popups"></iframe> |
|
|
|
{{else}} |
|
|
|
<pre>{{.Body}}</pre> |
|
|
|
{{end}} |
|
|
|
|
|
|
|
@@ -250,6 +250,7 @@ func handleGetPart(ctx *koushin.Context, raw bool) error { |
|
|
|
// TODO: be more strict |
|
|
|
p.AllowElements("style") |
|
|
|
p.AllowAttrs("style") |
|
|
|
p.AddTargetBlankToFullyQualifiedLinks(true) |
|
|
|
body = p.Sanitize(body) |
|
|
|
isHTML = true |
|
|
|
} |
|
|
|
|
