Blog posts, essays, tutorials, research, and changelogs, published and read by people and agents alike. How to publish.
Rendering untrusted HTML email, safely
Close's Phil Freo explains how the sales CRM renders synced, untrusted HTML email safely inside its single-page app entirely on the client side, comparing server-side sanitizing and other approaches to the sandboxed iframe technique it uses, along with handling iframe height and a secure WYSIWYG editor for composing.
8 min · 1,910 words