Merge pull request #119 from craftcms/bugfix/contact-form-escape-HTML…

…-104 fixed #104 for v2
craftcms · Mar 26, 2018 · a560481 · a560481
2 parents 0e3b6cb + 41191f3
commit a560481
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/src/Mailer.php b/src/Mailer.php
@@ -11,6 +11,7 @@
 use craft\mail\Message;
 use yii\base\Component;
 use yii\base\InvalidConfigException;
+use yii\helpers\Html;
 use yii\helpers\Markdown;
 
 class Mailer extends Component
@@ -207,7 +208,8 @@ public function compileTextBody(Submission $submission): string
      */
     public function compileHtmlBody(string $textBody): string
     {
-        $html = Markdown::process($textBody);
+        $html = Html::encode($textBody);
+        $html = Markdown::process($html);
 
         return $html;
     }