HTML entity decode for setHTML

spatie · Feb 10, 2025 · ecef587 · ecef587
1 parent 73a93f8
commit ecef587
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/src/Browsershot.php b/src/Browsershot.php
@@ -306,10 +306,12 @@ public function setProxyServer(string $proxyServer): static
 
     public function setHtml(string $html): static
     {
+        $decHtml = html_entity_decode($html, ENT_QUOTES | ENT_HTML5);
         foreach ($this->unsafeProtocols as $protocol) {
-            if (str_contains(strtolower($html), $protocol)) {
+            if (str_contains(strtolower($html), $protocol) || str_contains(strtolower($decHtml), $protocol) ) {
                 throw HtmlIsNotAllowedToContainFile::make();
             }
+
         }
 
         $this->html = $html;