We should filter all classes and inline attributes by using the Xss class.
Issue fork download_file-3426609
Show commands
Start within a Git clone of the project using the version control instructions.
Or, if you do not have SSH keys set up on git.drupalcode.org:
Comments
Comment #4
astonvictor commentedCreated and merged a new MR.
Filtered input valuues.