Headless-Chromium sidecar rendering hostile email HTML to PNG/PDF, for ParseMail
7.1K
An HTTP sidecar that renders a blob of HTML to PNG and PDF, light and dark, with headless Chromium via Playwright. It exists to serve ParseMail, so the HTML it renders is email from strangers, and every input is treated as hostile. Remote content is blocked by default. When a caller opts in, every address a hostname resolves to must be publicly routable, and redirects are re-checked hop by hop.
It is a Debian image (Chromium can't run on scratch), kept separate from ParseMail for its own patch cadence, memory limit and read-only filesystem. It is rebuilt nightly and published only when its contents change; images are signed with cosign. Pin the immutable tag X.Y.Z_<hash>; X.Y.Z is republished when a dependency is patched, and X.Y and latest move.
Content type
Image
Digest
sha256:62a1a8dc2…
Size
399.2 MB
Last updated
about 13 hours ago
docker pull grepular/parsemail-rendererPulls:
643
Sep 21 to Sep 27