tag rendering pass one

2026-06-17 10:48:14 +01:00
parent 26e428cd5f
commit febdb7da7a
4 changed files with 147 additions and 37 deletions
@@ -84,6 +84,7 @@ final class TicketCommentStoreController extends Controller
     */
    private function normaliseHtmlBody(string $body): string
    {
+        $body = html_entity_decode($body, ENT_QUOTES | ENT_HTML5, 'UTF-8');
        $body = preg_replace('/<\s*(script|style)[^>]*>.*?<\s*\/\s*\1\s*>/is', '', $body) ?: '';
        $body = preg_replace('/\s+on[a-z]+\s*=\s*("[^"]*"|\'[^\']*\'|[^\s>]+)/i', '', $body) ?: '';
        $body = preg_replace('/javascript\s*:/i', '', $body) ?: '';