alphagov/govspeak — pull request #5 by jamiecobbett (2012-08-21 11:49:30+00:00)
Title: Remove support for Google Maps iframes.

This code gave someone the ability to insert an arbitrary iframe, which is a serious security vulnerability.

We found one piece of content that uses this in publisher:
https://www.gov.uk/dsa-special-tests-for-instructors

Maybe there are uses in Whitehall?

As you can see, the map is pretty borked anyway. We would alter that content before deploying these changes.

We found this whilst implementing content sanitization for Panopticon/Publisher.