When using escapenoentities, decode entities
[lhc/web/wiklou.git] / includes / Sanitizer.php
index 2a3f847..ce508c3 100644 (file)
@@ -1063,7 +1063,7 @@ class Sanitizer {
                # hurt.
                $html = htmlspecialchars( $html, ENT_QUOTES );
                $html = str_replace( '&', '&', $html );
-               $html = Sanitizer::normalizeCharReferences( $html );
+               $html = Sanitizer::decodeCharReferences( $html );
                return $html;
        }