HTML escape mention display names

matrix-org / matrix-rich-text-editor

Matrix Rich Text Editor

https://matrix-org.github.io/matrix-rich-text-editor/

Apache License 2.0

82 stars 19 forks source link

HTML escape mention display names #986

Closed stefanceriu closed 2 weeks ago

stefanceriu commented 2 weeks ago

The clients can use the insertMentionAtSuggestion method to pass in free text which can contain HTML that will try to be interpreted, breaking the composer and generating wrong export strings.