contentful / rich-text.php

Utilities for the Contentful Rich Text
https://www.contentful.com
MIT License
12 stars 9 forks source link

Rendered content contains not sanitized HTML tags #34

Closed emsyzz closed 4 years ago

emsyzz commented 5 years ago

HTML tags inserted as text in Contentful's WYSIWYG is not sanitized on rendering.

pgrigoruta commented 4 years ago

Good find @emsyzz , thanks for sharing! We have fixed this issue at https://github.com/contentful/rich-text.php/commit/2cd380eeb43b2bc7aa93eaf7aee0c9de19b0bd4f