Use HtmlString to distinguish between HTML and plain text strings

[jtojnar]

The database also contains other escaped values:

• selfoss/src/helpers/ViewHelper.php

  Line 144 in ac61872

  $item['strippedTitle'] = htmLawed(htmlspecialchars_decode($item['title']), ['deny_attribute' => '*', 'elements' => '-*']);

• selfoss/src/controllers/Sources/Write.php

  Line 78 in 0920dcb

  $title = htmlspecialchars($data['title']);

• selfoss/src/controllers/Sources/Write.php

  Line 82 in 0920dcb

  $tags = array_map('htmlspecialchars', $data['tags']);

Similarly the view layer:

• selfoss/src/helpers/ViewHelper.php

  Line 144 in ac61872

  $item['strippedTitle'] = htmLawed(htmlspecialchars_decode($item['title']), ['deny_attribute' => '*', 'elements' => '-*']);

So I decided to first systematize the data model by using explicit object for HTML string.

Now we just need to remove the escaping everywhere else (will be a BC break).

[netlify]

✅ Deploy Preview for selfoss canceled.

Name	Link
🔨 Latest commit	b44d62f
🔍 Latest deploy log	https://app.netlify.com/sites/selfoss/deploys/63ed478dd972010008392181