From 958dfce63f3225e9393337317f1de5d88a3cc18d Mon Sep 17 00:00:00 2001
From: Vipin Shrivastava <vipin.shrivastava889@webkul.com>
Date: Wed, 8 Dec 2021 11:31:19 +0530
Subject: [PATCH 1/2] updates for create ticket-editor

---
 Controller/Ticket.php                         |  2 +-
 .../Snippets/createMemberTicket.html.twig     | 21 +++++++++++++++++--
 2 files changed, 20 insertions(+), 3 deletions(-)

diff --git a/Controller/Ticket.php b/Controller/Ticket.php
index 410d3cdf8..baa61f5e9 100755
--- a/Controller/Ticket.php
+++ b/Controller/Ticket.php
@@ -236,7 +236,7 @@ public function saveTicket(Request $request)
             'subject' => $ticketProxy->getSubject(),
             // @TODO: We need to enable support for html messages. 
             // Our focus here instead should be to prevent XSS (filter js)
-            'message' => strip_tags($ticketProxy->getReply()),
+            'message' => str_replace(['&lt;script&gt;', '&lt;/script&gt;'], '', htmlspecialchars($ticketProxy->getReply())),
             'firstName' => $customer->getFirstName(),
             'lastName' => $customer->getLastName(),
             'type' => $ticketProxy->getType(),
diff --git a/Resources/views/Snippets/createMemberTicket.html.twig b/Resources/views/Snippets/createMemberTicket.html.twig
index d3240bed9..9f5156411 100644
--- a/Resources/views/Snippets/createMemberTicket.html.twig
+++ b/Resources/views/Snippets/createMemberTicket.html.twig
@@ -58,7 +58,7 @@
             <div class="uv-element-block">
                 <label class="uv-field-label">{{ 'Message'|trans }}</label>
                 <div class="uv-field-block">
-                    <textarea name="reply" class="uv-field create-ticket" type="text"></textarea>
+                    <textarea name="reply" id="create-reply" class="uv-field create-ticket" type="text">{{ ticket_service.getAgentDraftReply() }}</textarea>
                 </div>
                 
                 <span class="uv-field-info">{{ 'Ticket query message'|trans }}</span>
@@ -382,6 +382,7 @@
     var validationParameters = true;
 </script>
 {% endif %}
+{{ include("@UVDeskSupportCenter/Templates/tinyMCE.html.twig") }}
 
 <script type="text/javascript">
     $(function () {
@@ -433,13 +434,29 @@
                     msg : "{{ 'This field is mandatory'|trans }}"
                 },
                 'reply' : {
-                    required : true,
+                    fn: function(value) {
+                            if(!tinyMCE.get("uv-edit-create-thread"))
+                                return false;
+                            var html = tinyMCE.get("uv-edit-create-thread").getContent();
+                            if(app.appView.stripHTML(html) != '') {
+                                return false;
+                            }
+                            return true;
+                        },
                     msg : "{{ 'This field is mandatory'|trans }}"
                 },
             }),
             urlRoot : "{{ path('helpdesk_member_create_ticket') }}"
         });
 
+        sfTinyMce.init({
+            height: '170px',
+			selector : '#create-reply',
+			images_upload_url: "",
+            setup: function(editor) {
+            }
+		});
+
         var CreateTicketForm = Backbone.View.extend({
             el : $("#create-ticket-modal #create-ticket-form"),
             model: new CreateTicketModel(),

From ab0319bfa13785181a11bc61fec0ae7b10742b02 Mon Sep 17 00:00:00 2001
From: Vipin Shrivastava <vipin.shrivastava889@webkul.com>
Date: Wed, 8 Dec 2021 12:30:17 +0530
Subject: [PATCH 2/2] updates

---
 Resources/views/Snippets/createMemberTicket.html.twig | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/Resources/views/Snippets/createMemberTicket.html.twig b/Resources/views/Snippets/createMemberTicket.html.twig
index 9f5156411..e1afe5233 100644
--- a/Resources/views/Snippets/createMemberTicket.html.twig
+++ b/Resources/views/Snippets/createMemberTicket.html.twig
@@ -450,11 +450,15 @@
         });
 
         sfTinyMce.init({
-            height: '170px',
+            height: '155px',
 			selector : '#create-reply',
 			images_upload_url: "",
             setup: function(editor) {
-            }
+            },
+			plugins: [
+            ],
+			toolbar: '| undo redo | bold italic forecolor ',
+			statusbar: false,
 		});
 
         var CreateTicketForm = Backbone.View.extend({