fix: call html_entity_decode() with explicit params and catch single-quotes

justlevine · justlevine · commit ace37afe453a · 2023-12-30T23:45:06.000Z
diff --git a/src/Model/Model.php b/src/Model/Model.php
@@ -520,7 +520,7 @@ public function html_entity_decode( $str, $field_name, $enabled = false ) {
 			return $str;
 		}
 
-		return html_entity_decode( $str );
+		return html_entity_decode( $str, ENT_QUOTES | ENT_SUBSTITUTE | ENT_HTML401, 'UTF-8' );
 	}
 
 	/**

Original file line number	Diff line number	Diff line change
`@@ -520,7 +520,7 @@ public function html_entity_decode( $str, $field_name, $enabled = false ) {`
`520`	`520`	`return $str;`
`521`	`521`	`}`
`522`	`522`
`523`		`- return html_entity_decode( $str );`
	`523`	`+ return html_entity_decode( $str, ENT_QUOTES \| ENT_SUBSTITUTE \| ENT_HTML401, 'UTF-8' );`
`524`	`524`	`}`
`525`	`525`
`526`	`526`	`/**`