Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Anonymise names in page titles #627

Merged
merged 3 commits into from
Sep 13, 2023

Conversation

libuk
Copy link
Contributor

@libuk libuk commented Sep 13, 2023

Context

We currently use a form page's title field to populate the document
title <title> element.

In order to protect PII leaking through Google Analytics (and
potentially other platforms) we need to remove the person's name from
this element. We still want to preserve the name in the page heading as
it provides a better user experience.

This PR follows the approach of CAS2 to introduce a required htmlDocumentTitle property,
decoupling the h1 title with the document title.

We also update the formatting for the page titles to be more accessible.

Screenshots of UI changes

Before

Screenshot 2023-09-13 at 15 37 19

After

Screenshot 2023-09-13 at 15 36 41

Release checklist

Release process documentation.

Pre-merge checklist

  • Are any changes required to dependent services for this change to work?
    (eg. CAS API)
  • Have they been released to production already?

Post-merge checklist

@libuk libuk force-pushed the change/1538-remove-person-name-from-page-titles branch 3 times, most recently from 2010f6b to a75bb73 Compare September 13, 2023 14:31
@libuk
Copy link
Contributor Author

libuk commented Sep 13, 2023

@libuk libuk marked this pull request as ready for review September 13, 2023 14:50
Copy link
Contributor

@richpjames richpjames left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Good work Dan!

Page titles should be displayed first as it allows you to better discern
a tab's current page if it's not active and also aids assistive
technologies by calling out the page name first.
Presently we reuse the page title for the html document title on form
pages. As some of the page titles contain a person's name, this is a
security issue.

This commit decouples the form page title from what's applied as the
html document title by introducing a new required `htmlDocumentTitle`
property.

We also change the titles which contain a person's name and instead put
"the person" it's place.
This commit removes the person name from the pages that are setting the
page title directly.
@libuk libuk force-pushed the change/1538-remove-person-name-from-page-titles branch from a75bb73 to d0b25a0 Compare September 13, 2023 16:34
@libuk libuk merged commit 0f4a79d into main Sep 13, 2023
@libuk libuk deleted the change/1538-remove-person-name-from-page-titles branch September 13, 2023 16:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants