07-25-2019, 05:49 PM
Interesting discovery for sure. I'm specifically using strip_tags() currently but decided to just try swapping htmlspecialchars() in which does fix the submission you linked. The problem is that it then breaks instances where potentially formatted text is displayed without formatting by displaying the HTML instead of just removing the tags. That's not the end of the world and I'm content to leave it for now but definitely keep an eye out for any odd display issues.