Simon Backx 4534b693e4 Added test that validates output HTML of email template (#15365) ... refs https://github.com/TryGhost/Team/issues/1871 This commit adds a test to the serialize method of `post-emaiserializer`. It checks whether the generated email HTML is valid and standard HTML5 and that all properties are escaped. To do this validation, I depend on the new `html-validate` dev dependency. Just parsing the HTML with a HTML parser is not enough to guarantee that the HTML is okay. Apart from that this fixes: - Removed the sanitizeHTML method and replaced it with normal HTML escaping. We don't want to allow any HTML in the escaped fields. Whereas `sanitizeHTML` still allows valid HTML, but we don't want that and want the same behaviour as on the site. E.g., a post with a title `All your need to know about the <br /> tag` should actually render the same title and non-html content, being `All your need to know about the &lt;br /&gt; tag` - The file, nft and audio card didn't (always) escape the injected HTML fields (new version @tryghost/kg-default-cards) - `@tryghost/string` is bumped because it contains the new escapeHtml method		2022-09-08 10:11:01 +02:00
..
lib	Added paid subscription start email alert	2022-08-25 19:53:02 +05:30
test	Updated offers setup to allow trial values	2022-08-11 11:04:39 +05:30
.eslintrc.js	Updated Eslint ECMAScript compatibility to 2022	2022-08-09 15:51:40 +02:00
index.js	Ensured correct usage of @tryghost/errors everywhere	2022-02-15 12:30:36 +00:00
package.json	Added test that validates output HTML of email template (#15365)	2022-09-08 10:11:01 +02:00