Merge pull request #216 from lara-zeus/fix-content

Fix content
lara-zeus · Oct 6, 2024 · 5d68455 · 5d68455
2 parents 0babf4d + 113f59e
commit 5d68455
Show file tree

Hide file tree

Showing 5 changed files with 58 additions and 47 deletions.
diff --git a/composer.lock b/composer.lock
diff --git a/src/Editors/MarkdownEditor.php b/src/Editors/MarkdownEditor.php
@@ -22,7 +22,11 @@ public static function component(): Component
     public static function render(string $content): string
     {
         if (class_exists(MarkdownEditorAlias::class)) {
-            return str($content)->markdown();
+            return (new \Illuminate\Support\HtmlString(
+                str(strip_tags($content))
+                    ->replace(['prompt(', 'eval(', '&lt;script', '<script'], '')
+                    ->markdown()
+            ))->toHtml();
         }
 
         return $content;

diff --git a/src/Editors/RichEditor.php b/src/Editors/RichEditor.php
@@ -21,6 +21,8 @@ public static function component(): Component
 
     public static function render(string $content): string
     {
-        return html_entity_decode($content);
+        return
+            str(html_entity_decode($content))
+                ->replace(['prompt(', 'eval(', '&lt;script', '<script'], '');
     }
 }
diff --git a/src/Editors/TinyEditor.php b/src/Editors/TinyEditor.php
@@ -24,7 +24,8 @@ public static function component(): Component
     public static function render(string $content): string
     {
         if (class_exists(TinyEditorAlias::class)) {
-            return html_entity_decode($content);
+            return str(html_entity_decode($content))
+                ->replace(['prompt(', 'eval(', '&lt;script', '<script'], '');
         }
 
         return $content;

diff --git a/src/Editors/TipTapEditor.php b/src/Editors/TipTapEditor.php
@@ -26,7 +26,11 @@ public static function render(string $content): string
     {
         if (class_exists(\FilamentTiptapEditor\TiptapEditor::class)) {
             // @phpstan-ignore-next-line
-            return tiptap_converter()->asHTML($content);
+            return tiptap_converter()
+                ->asHTML(
+                    str(html_entity_decode($content))
+                        ->replace(['prompt(', 'eval(', '&lt;script', '<script'], '')
+                );
         }
 
         return $content;