Merge pull request #216 from lara-zeus/fix-content

Fix content

Author: atmonshi

composer.lock

@@ -22,7 +22,11 @@ public static function component(): Component
     public static function render(string $content): string
     {
         if (class_exists(MarkdownEditorAlias::class)) {
-            return str($content)->markdown();
+            return (new \Illuminate\Support\HtmlString(
+                str(strip_tags($content))
+                    ->replace(['prompt(', 'eval(', '&lt;script', '<script'], '')
+                    ->markdown()
+            ))->toHtml();
         }
 
         return $content;

src/Editors/MarkdownEditor.php

@@ -21,6 +21,8 @@ public static function component(): Component
 
     public static function render(string $content): string
     {
-        return html_entity_decode($content);
+        return
+            str(html_entity_decode($content))
+                ->replace(['prompt(', 'eval(', '&lt;script', '<script'], '');
     }
 }

src/Editors/RichEditor.php

@@ -24,7 +24,8 @@ public static function component(): Component
     public static function render(string $content): string
     {
         if (class_exists(TinyEditorAlias::class)) {
-            return html_entity_decode($content);
+            return str(html_entity_decode($content))
+                ->replace(['prompt(', 'eval(', '&lt;script', '<script'], '');
         }
 
         return $content;

src/Editors/TinyEditor.php

@@ -26,7 +26,11 @@ public static function render(string $content): string
     {
         if (class_exists(\FilamentTiptapEditor\TiptapEditor::class)) {
             // @phpstan-ignore-next-line
-            return tiptap_converter()->asHTML($content);
+            return tiptap_converter()
+                ->asHTML(
+                    str(html_entity_decode($content))
+                        ->replace(['prompt(', 'eval(', '&lt;script', '<script'], '')
+                );
         }
 
         return $content;