Rather than injecting sanitized HTML into the page, an email body is rendered in a sandboxed iframe that auto-resizes to its content, so it reads inline like a conversation message but looks exactly like the real email.
Also called: email looks broken in the CRM · formatted email · html email preview
- 1HTML is sanitized with DOMPurify and written into a sandboxed iframe
- 2The frame measures its content and resizes so the email reads inline
- 3A DOMPurify hook forces rel="noopener noreferrer" onto every anchor
- 4Registered once at module scope so hooks do not accumulate per render
Customer emails were stripped of the table and style markup that almost all formatted mail is built from, so a supplier quote or a marketing email arrived looking broken and the builder could not tell whether the problem was the sender or the software. Emails now render inside a sandboxed, auto-sizing frame that shows them the way the customer sees them. The frame also closes a hole where a link a customer pasted into an email could reach back into the page that opened it.
- Table-based email layouts destroyed by aggressive sanitisation
- Reverse-tabnabbing from links inside customer email
See it on your own jobs
Twenty minutes, your numbers, no slide deck. We’ll build one of your real buildings in front of you and send you the estimate link at the end — yours to keep either way.
or keep browsing features →