[SECURITY] Correctly handle comment end bang state (#86)

Upgrade to https://github.com/Masterminds/html5-php/releases/tag/2.7.6

Security-References: CVE-2022-36020

composer.json

@@ -16,7 +16,7 @@
 	},
 	"require": {
 		"ext-dom": "*",
-		"masterminds/html5": "^2.7",
+		"masterminds/html5": "^2.7.6",
 		"php": "^7.2 || ^8.0",
 		"psr/log": "^1.0 || ^2.0 || ^3.0"
 	},

tests/ScenarioTest.php

@@ -21,6 +21,28 @@
 
 class ScenarioTest extends TestCase
 {
+    public static function allTagsAreRemovedOnMissingDeclarationDataProvider(): array
+    {
+        return [
+            ['<div class="content">value</div><span class="content">value</span>', ''],
+            ['<!--any--><div class="content">value</div>', '<!--any-->'],
+            ['<!--any--!><div class="content">value</div>', '<!--any-->'],
+        ];
+    }
+
+    /**
+     * @test
+     * @dataProvider allTagsAreRemovedOnMissingDeclarationDataProvider
+     */
+    public function allTagsAreRemovedOnMissingDeclaration(string $payload, string $expectation): void
+    {
+        $behavior = new Behavior();
+        $sanitizer = new Sanitizer(
+            new CommonVisitor($behavior)
+        );
+        self::assertSame($expectation, $sanitizer->sanitize($payload));
+    }
+
     public static function tagFlagsAreProcessedDataProvider(): array
     {
         return [