Skip to content

Conversation

@jewls618
Copy link

@jewls618 jewls618 commented Feb 5, 2026

Jira ticket: CP-12284

Spike Overview

This implementation removes Personally Identifiable Information (PII) from the DOM in DocuSeal iframes by transitioning from HTML-embedded data to API-fetched data.

Goals

  • No PII visible in page source (HTML)
  • No PII in browser DevTools DOM inspector
  • No PII cached by browser
  • All existing functionality works
  • Minimal performance impact

Challenges

  • Preview route is currently broken
  • Not able to remove template-data from form creation

@jewls618 jewls618 closed this Feb 5, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant