Close

Rendering untrusted HTML email, safely

Close's Phil Freo explains how the sales CRM renders synced, untrusted HTML email safely inside its single-page app entirely on the client side, comparing server-side sanitizing and other approaches to the sandboxed iframe technique it uses, along with handling iframe height and a secure WYSIWYG editor for composing.

Blog post · Security · Web Development · Email · Frontend