/** * Email body HTML often references inline attachments via `cid:` * URLs (e.g. ``). Those `cid:` refs are * meaningless outside the original mail viewer. To make markdown / * HTML output self-contained we replace each `cid:` with a base64 * `data:` URI sourced from the matching inline attachment. * * Hardening #1: only `image/*` content-types are embedded. Anything * else (`text/html`, `application/javascript`, ...) would let an * attacker turn an attachment into an executable payload via the * data URI; skip and leave the original `cid:` ref in place. */ type InlineAttachment = { readonly contentId: string; readonly contentType: string; readonly contentBytes: string; }; declare const embedInlineImages: (html: string, attachments: ReadonlyArray) => string; export { embedInlineImages }; export type { InlineAttachment };