private void checkSecurity(FacesContext context, TextEditor component) {
        boolean sanitizerAvailable = PrimeApplicationContext.getCurrentInstance(context).getEnvironment().isHtmlSanitizerAvailable();
        if (component.isSecure() && !sanitizerAvailable) {
            throw new FacesException("TextEditor component is marked secure='true' but the HTML Sanitizer was not found on the classpath. "
                        + "Either add the HTML sanitizer to the classpath per the documentation"
                        + " or mark secure='false' if you would like to use the component without the sanitizer.");
        }
    }
Enforce security by default requiring the OWASP sanitizer on the classpath.  Only if a user marks the editor
with secure="false" will they opt-out of security.

@param context the FacesContext
@param component the editor to check for security
primefaces/src/main/java/org/primefaces/component/texteditor/TextEditorRenderer.java