From a4b180eeba73c73efc92ea037c785cc71ea1b727 Mon Sep 17 00:00:00 2001
From: toaditi <aditi.patel@hotwax.co>
Date: Fri, 15 May 2026 16:22:42 +0530
Subject: [PATCH] Fixed: Order view page CSS leak from embedded email
 communication content
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

When a communication event exists on an order, OrderConversations dumps the
stored email HTML (a full <!DOCTYPE html> document with its own <style>
block) directly into the order view page. That global CSS reset cascades
to the parent page and breaks the order layout — tables lose padding,
the body background changes, screenlets re-style, etc.

Render the email body inside an iframe so its styles are isolated. Decode
the HTML-entity-encoded content client-side via a textarea before assigning
to srcdoc, since the content is stored encoded in the DB.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---
 .../party/DisplayCommunicationContent.ftl     | 23 +++++++++++++++----
 1 file changed, 19 insertions(+), 4 deletions(-)
diff --git a/applications/party/template/party/DisplayCommunicationContent.ftl b/applications/party/template/party/DisplayCommunicationContent.ftl
index 53f555e6d7a..a23fa5a5197 100644
--- a/applications/party/template/party/DisplayCommunicationContent.ftl
+++ b/applications/party/template/party/DisplayCommunicationContent.ftl
@@ -18,7 +18,22 @@ under the License.
 -->
 
 
-<#-- Display content in a specific div to avoid display conflicts -->
-<div style="margin-left: 14%;width:50% !important;">
-    ${StringUtil.wrapString(childCommEvent.content!)}
-</div>
\ No newline at end of file
+<#-- iframe isolates the email's <style> block from the parent page. Stored content is
+     HTML-entity-encoded, so decode it via a textarea before assigning to srcdoc. -->
+<#assign iframeId = "commContent_" + childCommEvent.communicationEventId>
+<iframe id="${iframeId}"
+        sandbox="allow-same-origin"
+        style="width: 100%; min-height: 600px; border: 1px solid #ccc; margin-left: 14%;"></iframe>
+<script type="text/javascript">
+    (function() {
+        var iframe = document.getElementById('${iframeId}');
+        iframe.onload = function() {
+            try {
+                this.style.height = (this.contentWindow.document.documentElement.scrollHeight + 20) + 'px';
+            } catch (e) {}
+        };
+        var decoder = document.createElement('textarea');
+        decoder.innerHTML = '${StringUtil.wrapString((childCommEvent.content!'')?js_string)}';
+        iframe.srcdoc = decoder.value;
+    })();
+</script>
\ No newline at end of file
