version bump (#2841)

# Description of Changes

Please provide a summary of the changes, including:

- What was changed
- Why the change was made
- Any challenges encountered

Closes #(issue_number)

---

## Checklist

### General

- [ ] I have read the [Contribution
Guidelines](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/CONTRIBUTING.md)
- [ ] I have read the [Stirling-PDF Developer
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md)
(if applicable)
- [ ] I have read the [How to add new languages to
Stirling-PDF](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/HowToAddNewLanguage.md)
(if applicable)
- [ ] I have performed a self-review of my own code
- [ ] My changes generate no new warnings

### Documentation

- [ ] I have updated relevant docs on [Stirling-PDF's doc
repo](https://github.com/Stirling-Tools/Stirling-Tools.github.io/blob/main/docs/)
(if functionality has heavily changed)
- [ ] I have read the section [Add New Translation
Tags](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/HowToAddNewLanguage.md#add-new-translation-tags)
(for new translation tags only)

### UI Changes (if applicable)

- [ ] Screenshots or videos demonstrating the UI changes are attached
(e.g., as comments or direct attachments in the PR)

### Testing (if applicable)

- [ ] I have tested my changes locally. Refer to the [Testing
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md#6-testing)
for more details.

.github/CODEOWNERS

@@ -1,2 +1,2 @@
 # All PRs to V1 must be approved by Frooodle
-* @Frooodle @reecebrowne @Ludy87 @DarioGii
+* @Frooodle @reecebrowne @Ludy87 @DarioGii @ConnorYoh

.github/workflows/PR-Demo-Comment.yml

@@ -27,7 +27,8 @@ jobs:
         github.event.comment.user.login == 'LaserKaspar' ||
         github.event.comment.user.login == 'sbplat' ||
         github.event.comment.user.login == 'reecebrowne' ||
-        github.event.comment.user.login == 'DarioGii'
+        github.event.comment.user.login == 'DarioGii' ||
+        github.event.comment.user.login == 'ConnorYoh'
       )
     outputs:
       pr_number: ${{ steps.get-pr.outputs.pr_number }}

.gitignore

@@ -140,6 +140,7 @@ venv.bak/
 # VS Code
 /.vscode/**/*
 !/.vscode/settings.json
+!/.vscode/extensions.json
 
 # IntelliJ IDEA
 .idea/

.vscode/extensions.json

@@ -0,0 +1,24 @@
+{
+  "recommendations": [
+    "elagil.pre-commit-helper", // Support for pre-commit hooks to enforce code quality
+    "josevseb.google-java-format-for-vs-code", // Google Java code formatter to follow the Google Java Style Guide
+    "ms-python.black-formatter", // Python code formatter using Black
+    "ms-python.flake8", // Flake8 linter for Python to enforce code quality
+    "ms-python.python", // Official Microsoft Python extension with IntelliSense, debugging, and Jupyter support
+    // "ms-vscode-remote.remote-containers", // Support for remote development with containers (Docker, Dev Containers)
+    // "ms-vscode-remote.vscode-remote-extensionpack", // Remote Development Pack for SSH, WSL, and Containers
+    "Oracle.oracle-java", // Oracle Java extension with additional features for Java development
+    "redhat.java", // Java support by Red Hat with IntelliSense, debugging, and code navigation
+    "shengchen.vscode-checkstyle", // Checkstyle integration for Java code quality checks
+    "streetsidesoftware.code-spell-checker", // Spell checker for code to avoid typos
+    "vmware.vscode-boot-dev-pack", // Developer tools for Spring Boot by VMware
+    "vmware.vscode-spring-boot", // Spring Boot tools by VMware for enhanced Spring development
+    "vscjava.vscode-gradle", // Gradle extension for build and automation support
+    "vscjava.vscode-java-debug", // Debugging support for Java projects
+    "vscjava.vscode-java-dependency", // Java dependency management within VS Code
+    "vscjava.vscode-java-pack", // Java Extension Pack with essential Java tools for VS Code
+    "vscjava.vscode-java-test", // Java test framework for running and debugging tests in VS Code
+    "vscjava.vscode-spring-boot-dashboard", // Spring Boot dashboard for managing and visualizing Spring Boot applications
+    "vscjava.vscode-spring-initializr" // Support for Spring Initializr to create new Spring projects
+  ]
+}

DeveloperGuide.md

@@ -39,6 +39,16 @@ Stirling-PDF is built using:
 2. Install Docker and JDK17 if not already installed.
 
 3. Install a recommended Java IDE such as Eclipse, IntelliJ, or VSCode
+   1. Only VSCode
+      1. Open VS Code.
+      2. When prompted, install the recommended extensions.
+      3. Alternatively, open the command palette (`Ctrl + Shift + P` or `Cmd + Shift + P` on macOS) and run:
+
+        ```sh
+        Extensions: Show Recommended Extensions
+        ```
+
+      4. Install the required extensions from the list.
 
 4. Lombok Setup
 Stirling-PDF uses Lombok to reduce boilerplate code. Some IDEs, like Eclipse, don't support Lombok out of the box. To set up Lombok in your development environment:
@@ -594,7 +604,7 @@ dependencies {
 # Generate verification metadata with signatures and checksums
 ./gradlew clean dependencies buildEnvironment spotlessApply --write-verification-metadata sha256,pgp
 
-# Export the .keys file 
+# Export the .keys file
 ./gradlew --export-keys
 ```
 
@@ -613,4 +623,3 @@ dependencies {
    - Review the changes in `verification-metadata.xml` to ensure they match your dependency updates
 
 This ensures dependencies are properly verified and secure while maintaining transparency in the repository.
-

build.gradle

@@ -25,7 +25,7 @@ ext {
 }
 
 group = "stirling.software"
-version = "0.40.0"
+version = "0.40.1"
 
 java {
     // 17 is lowest but we support and recommend 21

src/main/java/stirling/software/SPDF/controller/api/converters/ConvertHtmlToPDF.java

@@ -14,6 +14,7 @@ import io.swagger.v3.oas.annotations.Operation;
 import io.swagger.v3.oas.annotations.tags.Tag;
 
 import stirling.software.SPDF.model.api.converters.HTMLToPdfRequest;
+import stirling.software.SPDF.model.ApplicationProperties;
 import stirling.software.SPDF.service.CustomPDDocumentFactory;
 import stirling.software.SPDF.utils.FileToPdf;
 import stirling.software.SPDF.utils.WebResponseUtils;
@@ -27,12 +28,16 @@ public class ConvertHtmlToPDF {
 
     private final CustomPDDocumentFactory pdfDocumentFactory;
 
+	private final ApplicationProperties applicationProperties;
+
     @Autowired
     public ConvertHtmlToPDF(
             CustomPDDocumentFactory pdfDocumentFactory,
-            @Qualifier("bookAndHtmlFormatsInstalled") boolean bookAndHtmlFormatsInstalled) {
+            @Qualifier("bookAndHtmlFormatsInstalled") boolean bookAndHtmlFormatsInstalled,
+			ApplicationProperties applicationProperties) {
         this.pdfDocumentFactory = pdfDocumentFactory;
         this.bookAndHtmlFormatsInstalled = bookAndHtmlFormatsInstalled;
+		this.applicationProperties = applicationProperties;
     }
 
     @PostMapping(consumes = "multipart/form-data", value = "/html/pdf")
@@ -54,12 +59,16 @@ public class ConvertHtmlToPDF {
                 || (!originalFilename.endsWith(".html") && !originalFilename.endsWith(".zip"))) {
             throw new IllegalArgumentException("File must be either .html or .zip format.");
         }
+
+		boolean disableSanitize = Boolean.TRUE.equals(applicationProperties.getSystem().getDisableSanitize());
+
         byte[] pdfBytes =
                 FileToPdf.convertHtmlToPdf(
                         request,
                         fileInput.getBytes(),
                         originalFilename,
-                        bookAndHtmlFormatsInstalled);
+                        bookAndHtmlFormatsInstalled,
+						disableSanitize);
 
         pdfBytes = pdfDocumentFactory.createNewBytesBasedOnOldDocument(pdfBytes);
 

src/main/java/stirling/software/SPDF/controller/api/converters/ConvertMarkdownToPdf.java

@@ -24,6 +24,7 @@ import io.swagger.v3.oas.annotations.Operation;
 import io.swagger.v3.oas.annotations.tags.Tag;
 
 import stirling.software.SPDF.model.api.GeneralFile;
+import stirling.software.SPDF.model.ApplicationProperties;
 import stirling.software.SPDF.service.CustomPDDocumentFactory;
 import stirling.software.SPDF.utils.FileToPdf;
 import stirling.software.SPDF.utils.WebResponseUtils;
@@ -37,12 +38,16 @@ public class ConvertMarkdownToPdf {
 
     private final CustomPDDocumentFactory pdfDocumentFactory;
 
+	private final ApplicationProperties applicationProperties;
+
     @Autowired
     public ConvertMarkdownToPdf(
             CustomPDDocumentFactory pdfDocumentFactory,
-            @Qualifier("bookAndHtmlFormatsInstalled") boolean bookAndHtmlFormatsInstalled) {
+            @Qualifier("bookAndHtmlFormatsInstalled") boolean bookAndHtmlFormatsInstalled,
+			ApplicationProperties applicationProperties) {
         this.pdfDocumentFactory = pdfDocumentFactory;
         this.bookAndHtmlFormatsInstalled = bookAndHtmlFormatsInstalled;
+		this.applicationProperties = applicationProperties;
     }
 
     @PostMapping(consumes = "multipart/form-data", value = "/markdown/pdf")
@@ -76,12 +81,15 @@ public class ConvertMarkdownToPdf {
 
         String htmlContent = renderer.render(document);
 
+		boolean disableSanitize = Boolean.TRUE.equals(applicationProperties.getSystem().getDisableSanitize());
+
         byte[] pdfBytes =
                 FileToPdf.convertHtmlToPdf(
                         null,
                         htmlContent.getBytes(),
                         "converted.html",
-                        bookAndHtmlFormatsInstalled);
+                        bookAndHtmlFormatsInstalled,
+						disableSanitize);
         pdfBytes = pdfDocumentFactory.createNewBytesBasedOnOldDocument(pdfBytes);
         String outputFilename =
                 originalFilename.replaceFirst("[.][^.]+$", "")

src/main/java/stirling/software/SPDF/model/ApplicationProperties.java

@@ -283,6 +283,7 @@ public class ApplicationProperties {
         private Boolean enableAlphaFunctionality;
         private String enableAnalytics;
         private Datasource datasource;
+        private Boolean disableSanitize;
     }
 
     @Data

src/main/java/stirling/software/SPDF/utils/FileToPdf.java

@@ -26,7 +26,8 @@ public class FileToPdf {
             HTMLToPdfRequest request,
             byte[] fileBytes,
             String fileName,
-            boolean htmlFormatsInstalled)
+            boolean htmlFormatsInstalled,
+			boolean disableSanitize)
             throws IOException, InterruptedException {
 
         Path tempOutputFile = Files.createTempFile("output_", ".pdf");
@@ -35,13 +36,12 @@ public class FileToPdf {
         try {
             if (fileName.endsWith(".html")) {
                 tempInputFile = Files.createTempFile("input_", ".html");
-                String sanitizedHtml =
-                        sanitizeHtmlContent(new String(fileBytes, StandardCharsets.UTF_8));
+                String sanitizedHtml = sanitizeHtmlContent(new String(fileBytes, StandardCharsets.UTF_8), disableSanitize);
                 Files.write(tempInputFile, sanitizedHtml.getBytes(StandardCharsets.UTF_8));
             } else if (fileName.endsWith(".zip")) {
                 tempInputFile = Files.createTempFile("input_", ".zip");
                 Files.write(tempInputFile, fileBytes);
-                sanitizeHtmlFilesInZip(tempInputFile);
+                sanitizeHtmlFilesInZip(tempInputFile, disableSanitize);
             } else {
                 throw new IllegalArgumentException("Unsupported file format: " + fileName);
             }
@@ -89,11 +89,11 @@ public class FileToPdf {
         return pdfBytes;
     }
 
-    private static String sanitizeHtmlContent(String htmlContent) {
-        return CustomHtmlSanitizer.sanitize(htmlContent);
+    private static String sanitizeHtmlContent(String htmlContent, boolean disableSanitize) {
+        return (!disableSanitize) ? CustomHtmlSanitizer.sanitize(htmlContent) : htmlContent;
     }
 
-    private static void sanitizeHtmlFilesInZip(Path zipFilePath) throws IOException {
+    private static void sanitizeHtmlFilesInZip(Path zipFilePath, boolean disableSanitize) throws IOException {
         Path tempUnzippedDir = Files.createTempDirectory("unzipped_");
         try (ZipInputStream zipIn =
                 ZipSecurity.createHardenedInputStream(
@@ -106,7 +106,7 @@ public class FileToPdf {
                     if (entry.getName().toLowerCase().endsWith(".html")
                             || entry.getName().toLowerCase().endsWith(".htm")) {
                         String content = new String(zipIn.readAllBytes(), StandardCharsets.UTF_8);
-                        String sanitizedContent = sanitizeHtmlContent(content);
+                        String sanitizedContent = sanitizeHtmlContent(content, disableSanitize);
                         Files.write(filePath, sanitizedContent.getBytes(StandardCharsets.UTF_8));
                     } else {
                         Files.copy(zipIn, filePath);

src/main/resources/settings.yml.template

@@ -16,7 +16,7 @@ security:
   csrfDisabled: false # set to 'true' to disable CSRF protection (not recommended for production)
   loginAttemptCount: 5 # lock user account after 5 tries; when using e.g. Fail2Ban you can deactivate the function with -1
   loginResetTimeMinutes: 120 # lock account for 2 hours after x attempts
-  loginMethod: all # Accepts values like 'all' and 'normal'(only Login with Username/Password), 'oauth2'(only Login with OAuth2) or 'saml2'(only Login with SAML2) 
+  loginMethod: all # Accepts values like 'all' and 'normal'(only Login with Username/Password), 'oauth2'(only Login with OAuth2) or 'saml2'(only Login with SAML2)
   initialLogin:
     username: '' # initial username for the first login
     password: '' # initial password for the first login
@@ -86,6 +86,7 @@ system:
   customHTMLFiles: false # enable to have files placed in /customFiles/templates override the existing template HTML files
   tessdataDir: /usr/share/tessdata # path to the directory containing the Tessdata files. This setting is relevant for Windows systems. For Windows users, this path should be adjusted to point to the appropriate directory where the Tessdata files are stored.
   enableAnalytics: 'true' # set to 'true' to enable analytics, set to 'false' to disable analytics; for enterprise users, this is set to true
+  disableSanitize: false # set to true to disable Sanitize HTML; (can lead to injections in HTML)
   datasource:
     enableCustomDatabase: false # Enterprise users ONLY, set this property to 'true' if you would like to use your own custom database configuration
     customDatabaseUrl: '' # eg jdbc:postgresql://localhost:5432/postgres, set the url for your own custom database connection. If provided, the type, hostName, port and name are not necessary and will not be used
@@ -113,7 +114,7 @@ AutomaticallyGenerated:
   key: example
   UUID: example
   appVersion: 0.35.0
-  
+
 processExecutor:
   sessionLimit:    # Process executor instances limits
     libreOfficeSessionLimit: 1

src/main/resources/static/js/homecard.js

@@ -95,24 +95,23 @@ function reorderCards(container) {
 
 function initializeCards() {
   updateFavoritesSection();
+  updateFavoritesView();
   updateFavoritesDropdown();
   filterCards();
 }
 
 function updateFavoritesView() {
   const isFavoritesView = JSON.parse(localStorage.getItem('favoritesView') || 'false');
-  const textElement = document.getElementById('toggle-favourites-text');
   const iconElement = document.getElementById('toggle-favourites-icon');
   const favoritesGroup = document.querySelector('#groupFavorites');
   const favoritesList = JSON.parse(localStorage.getItem('favoritesList')) || [];
-  document.getElementById('favouritesVisibility').style.display = 'flex';
 
   if (isFavoritesView && favoritesList.length > 0) {
-    iconElement.textContent = 'visibility_off';
+    document.getElementById('favouritesVisibility').style.display = 'flex';
     favoritesGroup.style.display = 'flex';
   } else {
     if (favoritesList.length > 0) {
-      iconElement.textContent = 'visibility';
+      document.getElementById('favouritesVisibility').style.display = 'flex';
       favoritesGroup.style.display = 'none';
     } else {
       document.getElementById('favouritesVisibility').style.display = 'none';

src/main/resources/static/js/navbar.js

@@ -43,37 +43,36 @@ function toolsManager() {
 }
 
 window.tooltipSetup = () => {
-  const tooltipElements = document.querySelectorAll("[title]");
+  const tooltipElements = document.querySelectorAll('[title]');
 
   tooltipElements.forEach((element) => {
-    const tooltipText = element.getAttribute("title");
-    element.removeAttribute("title");
-
-    const customTooltip = document.createElement("div");
-    customTooltip.className = "btn-tooltip";
+    const tooltipText = element.getAttribute('title');
+    element.removeAttribute('title');
+    element.setAttribute('data-title, tooltipText');
+    const customTooltip = document.createElement('div');
+    customTooltip.className = 'btn-tooltip';
     customTooltip.textContent = tooltipText;
 
     document.body.appendChild(customTooltip);
 
-    element.addEventListener("mouseenter", (event) => {
-      customTooltip.style.display = "block";
+    element.addEventListener('mouseenter', (event) => {
+      customTooltip.style.display = 'block';
       customTooltip.style.left = `${event.pageX + 10}px`; // Position tooltip slightly away from the cursor
       customTooltip.style.top = `${event.pageY + 10}px`;
     });
 
     // Update the position of the tooltip as the user moves the mouse
-    element.addEventListener("mousemove", (event) => {
+    element.addEventListener('mousemove', (event) => {
       customTooltip.style.left = `${event.pageX + 10}px`;
       customTooltip.style.top = `${event.pageY + 10}px`;
     });
 
-
     // Hide the tooltip when the mouse leaves
-    element.addEventListener("mouseleave", () => {
-      customTooltip.style.display = "none";
+    element.addEventListener('mouseleave', () => {
+      customTooltip.style.display = 'none';
     });
   });
-}
-document.addEventListener("DOMContentLoaded", () => {
+};
+document.addEventListener('DOMContentLoaded', () => {
   tooltipSetup();
 });

src/main/resources/static/js/pages/home.js

@@ -127,14 +127,9 @@ function adjustVisibleElements() {
 }
 
 function adjustContainerAlignment() {
-  console.log('Adjusting container alignment');
-
   document.querySelectorAll('.features-container').forEach((parent) => {
     parent.querySelectorAll('.feature-rows').forEach((container) => {
-      const childElements = Array.from(container.children);
-
       const containerWidth = parent.offsetWidth;
-      console.log(containerWidth < 32 * parseFloat(getComputedStyle(document.documentElement).fontSize));
       if (containerWidth < 32 * parseFloat(getComputedStyle(document.documentElement).fontSize)) {
         container.classList.add('single-column');
       } else {

src/main/resources/static/js/tab-container.js

@@ -1,15 +1,14 @@
 TabContainer = {
   initTabGroups() {
-    const groups = document.querySelectorAll(".tab-group");
+    const groups = document.querySelectorAll('.tab-group');
     const unloadedGroups = [...groups].filter((g) => !g.initialised);
     unloadedGroups.forEach((group) => {
-      const containers = group.querySelectorAll(".tab-container");
-      const tabTitles = [...containers].map((c) => c.getAttribute("title"));
-
-      const tabList = document.createElement("div");
-      tabList.classList.add("tab-buttons");
+      const containers = group.querySelectorAll('.tab-container');
+      const tabTitles = [...containers].map((c) => c.getAttribute('data-title'));
+      const tabList = document.createElement('div');
+      tabList.classList.add('tab-buttons');
       tabTitles.forEach((title) => {
-        const tabButton = document.createElement("button");
+        const tabButton = document.createElement('button');
         tabButton.innerHTML = title;
         tabButton.onclick = (e) => {
           this.setActiveTab(e.target);
@@ -24,15 +23,15 @@ TabContainer = {
     });
   },
   setActiveTab(tabButton) {
-    const group = tabButton.closest(".tab-group");
+    const group = tabButton.closest('.tab-group');
 
-    group.querySelectorAll(".active").forEach((el) => el.classList.remove("active"));
+    group.querySelectorAll('.active').forEach((el) => el.classList.remove('active'));
 
-    tabButton.classList.add("active");
-    group.querySelector(`[title="${tabButton.innerHTML}"]`).classList.add("active");
+    tabButton.classList.add('active');
+    group.querySelector(`[data-title="${tabButton.innerHTML}"]`).classList.add('active');
   },
 };
 
-document.addEventListener("DOMContentLoaded", () => {
+document.addEventListener('DOMContentLoaded', () => {
   TabContainer.initTabGroups();
 });

src/main/resources/templates/home.html

@@ -55,7 +55,7 @@
               </span>
               <input type="text" id="searchBar" onkeyup="filterCards()" th:placeholder="#{home.searchBar}" autofocus>
 
-              <div style="display: flex;">
+              <div style="display: flex; column-gap: 3rem; flex-wrap: wrap; margin-left:1rem">
                 <div
                 style="height:2.5rem;  display: flex; align-items: center; cursor: pointer; justify-content: center;">
                 <label for="sort-options">Sort by:</label>
@@ -66,9 +66,8 @@
                   <!-- <option value="server">Popularity in organisation</option> -->
                 </select>
               </div>
-                <div
-                  style="display: flex; margin-left:2rem;align-items: center; flex-wrap: wrap; align-content: flex-start; width: fit-content; max-width: 100%; gap:3rem;  justify-content: center;">
-                  <div th:title="#{home.setFavorites}" style="display: flex; align-items: center; cursor: pointer;" onclick="toggleFavoritesMode()">
+                <div style="display: flex; align-items: center; flex-wrap: wrap; align-content: flex-start; width: fit-content; max-width: 100%; gap:2rem;  justify-content: center;">
+                <div th:title="#{home.setFavorites}" style="display: flex; align-items: center; cursor: pointer;" onclick="toggleFavoritesMode()">
                     <span class="material-symbols-rounded toggle-favourites"
                       style="font-size: 2rem;  margin-left: 0.2rem;">
                       star

src/main/resources/templates/sign.html

@@ -43,13 +43,13 @@
             </div>
             <script type="module" th:src="@{'/pdfjs-legacy/pdf.mjs'}"></script>
             <div class="tab-group show-on-file-selected">
-              <div class="tab-container" th:title="#{sign.upload}">
+              <div class="tab-container" th:title="#{sign.upload}" th:data-title="#{sign.upload}">
                 <div
                   th:replace="~{fragments/common :: fileSelector(name='image-upload', disableMultipleFiles=false, multipleInputsForSingleRequest=true, accept='image/*', inputText=#{imgPrompt})}">
                 </div>
               </div>
 
-              <div class="tab-container drawing-pad-container" th:title="#{sign.draw}">
+              <div class="tab-container drawing-pad-container" th:title="#{sign.draw}" th:data-title="#{sign.draw}">
                 <canvas id="drawing-pad-canvas"></canvas>
                 <br>
                 <button id="clear-signature" class="btn btn-outline-danger mt-2" onclick="signaturePad.clear()"
@@ -58,7 +58,7 @@
                   th:text="#{sign.add}"></button>
               </div>
 
-              <div class="tab-container" th:title="#{sign.saved}">
+              <div class="tab-container" th:title="#{sign.saved}" th:data-title="#{sign.saved}">
                 <div class="saved-signatures-section" th:if="${not #lists.isEmpty(signatures)}">
 
                   <!-- Preview Modal -->
@@ -130,7 +130,7 @@
                 </div>
               </div>
 
-              <div class="tab-container" th:title="#{sign.text}">
+              <div class="tab-container" th:title="#{sign.text}" th:data-title="#{sign.text}">
                 <label class="form-check-label" for="sigText" th:text="#{text}"></label>
                 <textarea class="form-control" id="sigText" name="sigText" rows="3"></textarea>
                 <label th:text="#{font}"></label>

src/test/java/stirling/software/SPDF/utils/FileToPdfTest.java

@@ -15,10 +15,11 @@ public class FileToPdfTest {
         byte[] fileBytes = new byte[0]; // Sample file bytes
         String fileName = "test.html"; // Sample file name
         boolean htmlFormatsInstalled = true; // Sample boolean value
+        boolean disableSanitize = false; // Sample boolean value
 
         // Check if the method throws IOException
         assertThrows(IOException.class, () -> {
-            FileToPdf.convertHtmlToPdf(request, fileBytes, fileName, htmlFormatsInstalled);
+            FileToPdf.convertHtmlToPdf(request, fileBytes, fileName, htmlFormatsInstalled, disableSanitize);
         });
     }