// Safe HTML shaping for email bodies rendered inside a sandboxed WebView. // // Layered defenses (in order of importance): // 1. The WebView runs the content with `originWhitelist={['about:*']}` and a // strict Content-Security-Policy meta (no script-src, no default-src), // so inline