From 4a531df8bd419e5dfb55e8fe6cbd519688804c4f Mon Sep 17 00:00:00 2001
From: Antoine Piron <billisdead@tutanota.com>
Date: Wed, 10 Jun 2026 17:01:15 +0200
Subject: [PATCH] fix: strip HTML-encoded tags (decode entities before
 stripping)

The previous stripHtml decoded &lt;/&gt; after the regex pass, so content
stored as &lt;p&gt;text&lt;/p&gt; was never stripped. Now entities are
decoded first, then all tags are removed.

Also strip HTML when prefilling compose from an existing post (Edit/Repost)
so the text field shows clean content, not raw markup.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 artifacts/postiz-mobile/app/(tabs)/posts.tsx |  2 +-
 artifacts/postiz-mobile/lib/stripHtml.ts     | 19 ++++++++++++-------
 2 files changed, 13 insertions(+), 8 deletions(-)

diff --git a/artifacts/postiz-mobile/app/(tabs)/posts.tsx b/artifacts/postiz-mobile/app/(tabs)/posts.tsx
index 0aa7fde..0e17c69 100644
--- a/artifacts/postiz-mobile/app/(tabs)/posts.tsx
+++ b/artifacts/postiz-mobile/app/(tabs)/posts.tsx
@@ -155,7 +155,7 @@ export default function PostsScreen() {
     router.push({
       pathname: "/(tabs)/compose",
       params: {
-        prefillContent: post.content,
+        prefillContent: stripHtml(post.content),
         prefillIntegrationIds: integrations.map((i) => i.id).join(","),
       },
     });
diff --git a/artifacts/postiz-mobile/lib/stripHtml.ts b/artifacts/postiz-mobile/lib/stripHtml.ts
index 172b0d2..af3c46c 100644
--- a/artifacts/postiz-mobile/lib/stripHtml.ts
+++ b/artifacts/postiz-mobile/lib/stripHtml.ts
@@ -1,14 +1,19 @@
 export function stripHtml(html: string): string {
-  return html
-    .replace(/<br\s*\/?>/gi, "\n")
-    .replace(/<\/p>/gi, "\n")
-    .replace(/<[^>]+>/g, "")
+  // Decode entities first so encoded tags like &lt;p&gt; are also stripped
+  let s = html
     .replace(/&amp;/g, "&")
     .replace(/&lt;/g, "<")
     .replace(/&gt;/g, ">")
     .replace(/&quot;/g, '"')
     .replace(/&#39;/g, "'")
-    .replace(/&nbsp;/g, " ")
-    .replace(/\n{3,}/g, "\n\n")
-    .trim();
+    .replace(/&nbsp;/g, " ");
+  // Block-level tags → newlines
+  s = s
+    .replace(/<br\s*\/?>/gi, "\n")
+    .replace(/<\/p>/gi, "\n")
+    .replace(/<\/div>/gi, "\n")
+    .replace(/<\/li>/gi, "\n");
+  // Strip all remaining tags
+  s = s.replace(/<[^>]+>/g, "");
+  return s.replace(/\n{3,}/g, "\n\n").trim();
 }