From cc9bafd3319ef04f439a4c343bff1b55ca9ce17c Mon Sep 17 00:00:00 2001 From: =?utf8?q?Tim=20D=C3=BCsterhus?= Date: Thu, 20 Jan 2022 11:29:39 +0100 Subject: [PATCH] Unify StringUtil::decodeHTML() flags with ::encodeHTML() see f631a7de6506e52095299c15042c25a3979a8200 --- wcfsetup/install/files/lib/util/StringUtil.class.php | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/wcfsetup/install/files/lib/util/StringUtil.class.php b/wcfsetup/install/files/lib/util/StringUtil.class.php index 918c560e86..7532bfd089 100644 --- a/wcfsetup/install/files/lib/util/StringUtil.class.php +++ b/wcfsetup/install/files/lib/util/StringUtil.class.php @@ -165,7 +165,11 @@ final class StringUtil { $string = \str_ireplace(' ', ' ', $string); // convert non-breaking spaces to ascii 32; not ascii 160 - return @\html_entity_decode($string, \ENT_COMPAT, 'UTF-8'); + return @\html_entity_decode( + $string, + \ENT_QUOTES | \ENT_SUBSTITUTE | \ENT_HTML401, + 'UTF-8' + ); } /** -- 2.20.1