Hi';
$clean = $service->sanitizeHtml($html);
$this->assertStringNotContainsString('script', $clean);
$this->assertStringNotContainsString('onclick', $clean);
}
public function test_compose_replaces_name_when_personalized(): void
{
$service = new BroadcastEmailComposerService();
$html = 'Hello {{name}}
';
$rendered = $service->compose(false, 'Subject', $html, 'Parent', '', '', '', true);
$this->assertSame('Hello Parent
', $rendered);
}
}