Real-World Example
Jane opens her account details and wants to contact ABC Collections. The consumer-facing creditor details should show ABC Collections’ correct company name, support email, phone number, and approved public information.
If ABC Collections updates this information, Jane should see the updated details the next time she views the creditor information.
Visual Flow
How It Should Work
- It should let the creditor maintain public-facing company and contact details.
- It should sanitize submitted rich-text HTML before storage, preserving supported formatting while removing unsupported or unsafe elements and attributes.
- The sanitized result should contain visible text before it can be saved.
- Consumer-facing pages should show the correct creditor information.
- The information should stay tied to the creditor account.
How It Should Not Work
- It should not show incorrect or outdated contact details after an update.
- It should not show one creditor’s company details to another creditor’s consumers.
- It should not store scripts, unsafe embeds, unsafe links, or event-handler attributes from editor content.
- It should not expose private internal information as consumer-facing content.
Last modified on July 30, 2026
