sanitize content server side

QuizandSurveyMaster · Feb 23, 2024 · 85d99f0 · 85d99f0
1 parent f8a12b2
commit 85d99f0
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/php/classes/class-qsm-results-pages.php b/php/classes/class-qsm-results-pages.php
@@ -322,10 +322,16 @@ public static function convert_to_new_system( $quiz_id ) {
 	}
 
 	public static function sanitize_html( $html = '' ) {
-
+
+		//Decode Html
+		$html = htmlspecialchars_decode( $html, ENT_QUOTES );
+
 		// Remove unwanted html tags
 		$html = preg_replace('/<(script|form|textarea|div|body|title|svg|link|meta)[^>]*>.*?<\/\1>/is', '', $html);
 
+		// Remove styles attributes
+		$html = preg_replace('/(<[^>]+) style=".*?"/i', '$1', $html);
+
 		// Remove input tags
 		$html = preg_replace('/<input\b[^>]*>/i', '', $html);