Dave,
This is unintentional. Can you reproduce this on the test server?
What happened was that I changed the existing Allowed* params to accept a * wildcard for any tag/any attribute, etc.
Also, I got rid of the allowedURLattribute stuff.
But that shouldn't cause simple <a href="..."> to not be allowed anymore. If so, please file a sev 2, pri 1 bug.
And add an automated test case!
/Lars
