Email display - HTML iFrame, or not?

Questions
1

My app is storing emails parsed from Postmark, including the full HTML body. In certain instances, I want to display the full HTML version of the email in the app.

I have used the HTML element for this - but is there a security concern with using this approach? If someone emailed some bad HTML in the email body, could that cause issues?

Would switching this to an iFrame help with this?

2

Yes use iframe

I’ve had HTML the email break the entire app page because it had conflicting css/html

Just view an email from Discord and you’ll see what I mean

My issue still is links inside the email the user can click on, and it will actually navigate to the new page inside the HTML element. Still need to work on fixing that :pensive: