Implement MeMo1.2 compliance [SFRMS-129]

[ChatBotBerg]

Short description

Ensure that OS2 forms sending digital post follows the new requirement from DIGST regarding filenale for attachments and refered urls. https://os2web.atlassian.net/browse/S2FRMS-129?isEligibleForUserSurvey=true
as described here in danish https://digitaliser.dk/digital-post/vejledninger/memo

Background information in danish

Denne mail er et varsel om, at Digitaliseringsstyrelsen pr. 10. september 2025:

• Skærper valideringer af hyperlinks, som fremover skal være af typen HTTPS.
• Afviser filnavne, som indeholder specielle karakterer. Læs mere på https://digitaliser.dk/digital-post/vejledninger/tilladte-filtyper-og-navne.
  Hvis du er afsender af post, skal du:
• Undersøge om dit afsendersystem danner hyperlinks, som ikke er HTTPS samt undersøge om de filnavne, som dannes, overholder de ændrede krav.
• Sikre at evt. systemtilpasninger er igangsat inden d. 10. september 2025, uanset hvilken MeMo-version, som dine IT-systemer anvender.

Hvis en afsender sender post som ikke overholder gyldige MeMo-formater, så vil man fra Digital Post (via KOMBIT) få en besked, som ved alle andre fejl.
Hvis en modtager ikke kan modtage MeMo version 1.2 efter overgangsperioden, vil det modtagende system skulle håndtere posten på anden måde.

Important dates

• 2025.05.07: Detailed requirement process initiated
• 2025.09.10: URL & Filename compliace required

Activities or subtasks

• Solution outline to be defined
• Definition of done to be finalized
• Detailed Design defining technical subtask and acceptance criteria's
• Delivery dates to be set
• implementation/ rollout/ communication plan to be defined

Definition of Done

{Describe in plane words when the task is to be cosidered as completet and specify any formal approval needes}

Key Concerns & Consequences if not done

##NB! this issue description are to be updated on ongoing basis to reflect decisions and changes made.

[ChatBotBerg]

@janhalen : please assist in defining details & work breakdown structure

[janhalen]

I'll look into the technical details ASAP.

ITK-Dev has offered to supply a pro-bono sparring session starring @jekuaitk some time in the coming week. 💝

@jekuaitk: Looking forward to a session about inpt validation mechanisms and flow.

[janhalen]

Identified two tasks fixable inside the os2forms core. Issues created here:

1. Enforce HTTPS links in the "Actions" url field #174
2. Permanently enable filename sanitizer #175

[janhalen]

@rimi-itk pointed out a new task, that should be fixed in a dependency owned by ITK-Dev for reaching full MeMo 1.2 schema compatibility.

An new issue is created in the repo where that dependency is developed and maintained.

1. Schema compatibility with MeMo 1.2 format itk-dev/serviceplatformen#40

Warning

This dependency is maintained by ITK-Dev and is not part of the os2forms-core maintenance agreement.

Please be aware of the following risks:

Limited maintenance resources: Currently, active development and support are handled by a small team outside the core project.

Continuity risk: If key maintainers are unavailable, updates or fixes may be delayed or won' t be fixed at all.

Support boundaries: Requests for changes or urgent fixes may fall outside the scope of our standard support agreement.

We value the contributions from ITK-Dev and appreciate their work. This note is simply to clarify support boundaries and help everyone understand the potential risks in long-term maintenance and support.

[janhalen]

@ChatBotBerg. Break down done 🎁 ... please let me know if I can be of further assistance...