Index: tool/src/java/org/sakaiproject/profile2/tool/ProfileApplication.java
===================================================================
--- tool/src/java/org/sakaiproject/profile2/tool/ProfileApplication.java	(revision 449)
+++ tool/src/java/org/sakaiproject/profile2/tool/ProfileApplication.java	(working copy)
@@ -23,6 +23,7 @@
 import org.apache.wicket.Request;
 import org.apache.wicket.RequestCycle;
 import org.apache.wicket.Response;
+import org.apache.wicket.markup.html.SecurePackageResourceGuard;
 import org.apache.wicket.protocol.http.WebApplication;
 import org.apache.wicket.protocol.http.WebRequest;
 import org.apache.wicket.protocol.http.WebRequestCycle;
@@ -50,6 +51,11 @@
 		
 		// Custom resource loader since our properties are not in the default location
 		getResourceSettings().addStringResourceLoader(new ProfileStringResourceLoader());		
+		
+		// PRFL-803, add *.htm to the allowed resources for tinymce
+		SecurePackageResourceGuard guard = (SecurePackageResourceGuard) getResourceSettings().getPackageResourceGuard();
+		guard.addPattern("+*.htm");
+		
 	}
 	
 	// Throw RuntimeExceptions so they are caught by the Sakai ErrorReportHandler