I came a cropper with this bug and subsequently found that the bug has been raised on Naimbie/jfoobar.
It is simply a case that the forms xml file contains two fields with filter attributes set to "ContactsHelper" rather than the generic/replacable JFoorbarsHelper. This meant that the validation code wasn't being used and stops the ability to control who can use what html tags and attributes.
I came a cropper with this bug and subsequently found that the bug has been raised on Naimbie/jfoobar. It is simply a case that the forms xml file contains two fields with filter attributes set to "ContactsHelper" rather than the generic/replacable JFoorbarsHelper. This meant that the validation code wasn't being used and stops the ability to control who can use what html tags and attributes.