GitHub/kill-the-news
1
0
Fork 0
mirror of https://github.com/juherr/kill-the-news.git synced 2026-06-20 22:03:48 +00:00
Code Issues Packages Projects Releases Wiki Activity

refactor(html-processor): isolate cid rewrite from sanitization

Browse Source 
Keep sanitizeElement single-purpose and run the cid: rewrite as a
separate guarded pass over [src] elements. Use a type-only import for
AttachmentData.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
This commit is contained in:
Julien Herr
2026-05-23 18:47:20 +02:00
parent debbfc623e
commit 5fc91a0be4
1 changed files with 9 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/utils/html-processor.ts
+8 -11
View File
@@ -1,6 +1,6 @@
import { parseHTML } from "linkedom";
import escapeHtml from "escape-html";
import { AttachmentData } from "../types";
import type { AttachmentData } from "../types";
// Strip surrounding angle brackets and whitespace from a Content-ID so that a
// stored value like "<ii_mpi85rqy0>" matches an HTML reference "cid:ii_mpi85rqy0".
@@ -40,11 +40,7 @@ function rewriteCidSrc(
);
}
function sanitizeElement(
el: Element,
cidMap: Map<string, AttachmentData>,
baseUrl: string,
): void {
function sanitizeElement(el: Element): void {
// Snapshot attribute names before mutating (linkedom attributes is array-like)
const attrs = Array.from(
el.attributes as unknown as ArrayLike<{ name: string }>,
@@ -64,9 +60,6 @@ function sanitizeElement(
}
}
}
if (cidMap.size > 0) {
rewriteCidSrc(el, cidMap, baseUrl);
}
// Strip mso-* inline style properties (Office HTML noise)
const style = el.getAttribute("style");
if (style !== null) {
@@ -113,9 +106,13 @@ export function processEmailContent(
.querySelectorAll("script, object, embed, iframe, frame, frameset")
.forEach((el: Element) => el.remove());
document.querySelectorAll("*").forEach((el: Element) => sanitizeElement(el));
if (cidMap.size > 0) {
document
.querySelectorAll("*")
.forEach((el: Element) => sanitizeElement(el, cidMap, baseUrl));
.querySelectorAll("[src]")
.forEach((el: Element) => rewriteCidSrc(el, cidMap, baseUrl));
}
// Full documents expose a <body>; bodyless fragments are serialized directly
// so that sanitization and cid rewriting still apply to their nodes.