CMDCT-4228: Address Pen Test Findings

[karla-vm]

Description

The CCIC penetration testing team was able to inject HTML into the Admin Banner form. @benmartin-coforma investigated a potential issue with DOMpurify not cleaning up a string that was larger than 16KB and found a solution which is being addressed here.

Related ticket(s)

CMDCT-4228

---

How to test

N/A

Notes

---

Pre-review checklist

• I have added thorough tests, if necessary
• I have updated relevant documentation, if necessary
• I have performed a self-review of my code
• I have manually tested this PR in the deployed cloud environment

---

Pre-merge checklist

Review

• Design: This work has been reviewed and approved by design, if necessary
• Product: This work has been reviewed and approved by product owner, if necessary

Security

If either of the following are true, notify the team's ISSO (Information System Security Officer).

• These changes are significant enough to require an update to the SIA.
• These changes are significant enough to require a penetration test.

---

convert to a different template: test → val | val → prod

[codeclimate]

Code Climate has analyzed commit 017ee3c and detected 0 issues on this pull request.

The test coverage on the diff in this pull request is 100.0% (90% is the threshold).

This pull request will bring the total coverage in the repository to 96.7% (0.0% change).

View more on Code Climate.