From 7ca3d3e1eb8c41ed5de1d39faf260739b38fdcd1 Mon Sep 17 00:00:00 2001
From: Smyile <84925446+xsmyile@users.noreply.github.com>
Date: Wed, 24 Jun 2026 09:53:55 +0200
Subject: [PATCH] fix(ui): make links in email HTML preview clickable

---
 ui/src/components/MessageDetail.tsx | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/ui/src/components/MessageDetail.tsx b/ui/src/components/MessageDetail.tsx
index 86fcfce..b9665c9 100644
--- a/ui/src/components/MessageDetail.tsx
+++ b/ui/src/components/MessageDetail.tsx
@@ -316,6 +316,8 @@ function cspMeta(): string {
   return `<meta http-equiv="Content-Security-Policy" content="default-src 'none'; style-src 'unsafe-inline'; img-src ${origin} data: http: https:; font-src 'none'; object-src 'none'; base-uri 'none'; form-action 'none';">`;
 }
 
+const LINK_TARGET_BLANK = '<base target="_blank">';
+
 function HtmlPreview(props: {
   html: string | null;
   text: string | null;
@@ -328,7 +330,7 @@ function HtmlPreview(props: {
   const srcdoc = createMemo(() => {
     const r = rewritten();
     if (r === null) return null;
-    return cspMeta() + rewriteToAbsoluteUrls(r);
+    return cspMeta() + LINK_TARGET_BLANK + rewriteToAbsoluteUrls(r);
   });
 
   return (
@@ -342,7 +344,7 @@ function HtmlPreview(props: {
     >
       {(html) => (
         <iframe
-          sandbox=""
+          sandbox="allow-popups allow-popups-to-escape-sandbox"
           srcdoc={html()}
           class="w-full h-full border-0 bg-white"
           title="Email HTML preview"