[Prod] Resolve issues found during pen test

[thewatermethod]

Description of change

Ensure select fields on the AR & TR are escaped from arbitrary HTML before being saved

How to test

Essentially, to test you need to have credentials to our system and the technical knowledge to intercept the communication between the front and the back end. I used a tool called Postman, and was able to inject HTML into our database by watching the traffic and duplicating it. There are unit tests verifying this fix.

Issue(s)

• https://jira.acf.gov/browse/TTAHUB-2573
• https://jira.acf.gov/browse/TTAHUB-2575
• https://jira.acf.gov/browse/TTAHUB-2576
• https://jira.acf.gov/browse/TTAHUB-2577

Checklists

Every PR

• Meets issue criteria
• JIRA ticket status updated
• Code is meaningfully tested
• Meets accessibility standards (WCAG 2.1 Levels A, AA)
• API Documentation updated
• Boundary diagram updated
• Logical Data Model updated
• Architectural Decision Records written for major infrastructure decisions
• UI review complete

Before merge to main

• OHS demo complete
• Ready to create production PR

Production Deploy

• Staging smoke test completed

After merge/deploy

• Update JIRA ticket status