Decode HTML entities when sanitized

Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2021-03-29 19:26:49 +02:00
parent 69339700cd
commit 8e6aa8c85c
3 changed files with 3 additions and 2 deletions
--- a/lib/service/formatter/html.ex
+++ b/lib/service/formatter/html.ex
@@ -17,7 +17,7 @@ defmodule Mobilizon.Service.Formatter.HTML do
  def strip_tags(html) do
    case FastSanitize.strip_tags(html) do
      {:ok, html} ->
-        html
+        HtmlEntities.decode(html)

      _ ->
        raise "Failed to filter tags"