Do I need to use sanitize the output for emails? #2830
Unanswered
VulcanTech-io
asked this question in
Q&A
Replies: 1 comment
-
The sanitize option is deprecated and should not be used. If you are running user generated marked markdown through marked you can use dompurify on the output of marked if you want to prevent xss attacks. If the emails are generated by markdown created by you than there is no need to sanitize it. (Unless you think you may accidentally try to hack your users. 😜) |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
I am using this library to send emails. (using node mailer) Emails are heavily sanitized by the vendors already, so is there a reason to sanitize the output still? (other than it just being a best practice)
Beta Was this translation helpful? Give feedback.
All reactions