Conversation
|
I would have expected https://github.com/hmcts/fact-api/blob/master/src/main/java/uk/gov/hmcts/dts/fact/html/sanitizer/OwaspHtmlSanitizer.java to be updated also to not allow any html tags. We can assume that the tinymce boxes will not allow it (potentially) but if they do, we likely want to change the logic to prevent all html. Correct me if I am wrong and we allow some. I don't think we would after this change as it would be text only |
changed it now to not allow any html through |
JIRA link (if applicable)
https://tools.hmcts.net/jira/browse/FACT-2368
Change description
this should just be datafixes for making sure court pages are still readable and correct once mce is removed
note not finished yet
Does this PR introduce a breaking change? (check one with "x")