fix(all): Strip all HTML from Bot Input.

GeneralBots · Oct 30, 2020 · dceb0fd · dceb0fd
1 parent 3e9d760
commit dceb0fd
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/packages/core.gbapp/services/GBMinService.ts b/packages/core.gbapp/services/GBMinService.ts
@@ -765,8 +765,8 @@ export class GBMinService {
         await step.continueDialog();
       } else {
         let text = context.activity.text;
-        text = text.replace(/<\/?[^>]+(>|$)/g, "");
-        
+        text = text.replace(/<([^>]+?)([^>]*?)>(.*?)<\/\1>/ig, "");
+
         // Spells check the input text before translating.
 
         const key = min.instance.spellcheckerKey ? min.instance.spellcheckerKey : min.instance.spellcheckerKey;