We’ve introduced a new security enhancement for comment fields to protect against HTML injection and unauthorized data exfiltration, even when content is submitted via direct API calls. You can now enable the optional CommentHtmlSanitization setting to strictly control which HTML tags, attributes, and CSS properties are allowed in user-generated comments. This improvement allows you to define a safe allowlist for styles and filter image URLs to trusted hosts, ensuring your environment remains secure while maintaining essential formatting.
The Setting added to PortalConfiguration to protect against unsafe content in a comment field page has loaded.
Content Hub Changelog
Learn more about new versions, changes and improvements for Content Hub
Setting added to PortalConfiguration to protect against unsafe content in a comment field
Improvement