# Le texte de réponse affiche du HTML lors de la réponse à un message qui commence par une mention

**URL:** <https://meta.discourse.org/t/reply-text-displays-html-when-replying-to-a-message-that-starts-with-a-mention/257269>\
**Category:** Bug\
**Tags:** chat\
**Created:** [Mars 6, 2023, 4:35 UTC](https://meta.discourse.org/t/reply-text-displays-html-when-replying-to-a-message-that-starts-with-a-mention/257269 "2023-03-06T16:35:34Z")\
**Posts on this page:** 1\
**Showing post:** 12

<div class="post-metadata">

**Author:** ![martin](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/martin/32/491371_2.png) [@martin](https://meta.discourse.org/u/martin)\
**Post date:** [Juillet 12, 2023, 11:45 UTC](https://meta.discourse.org/t/reply-text-displays-html-when-replying-to-a-message-that-starts-with-a-mention/257269/12 "2023-07-12T23:45:10Z")

</div>

Merci pour les rapports, le problème sera résolu par ce commit :

> <https://github.com/discourse/discourse/pull/22559>
>
> Followup to 58c8f91d9acf20bbd8d4ef3bd88ed719564769ec
> 
> It is now safe to render… the message excerpt as HTML since
> it is no longer using text\_entities: true in the server
> PrettyText.excerpt call when creating the message excerpt
> from the cooked HTML.
> 
> This will fix the issue of things like mentions showing
> HTML code instead of the actual mention when replying,
> and cannot be used to inject improper HTML like style tags
> via XSS.
> 
> \<img width="1108" alt="image" src="https://github.com/discourse/discourse/assets/920448/14401f44-70a4-4501-8bb8-8c3b3e386e30"\>

---

_[View the full topic](https://meta.discourse.org/t/reply-text-displays-html-when-replying-to-a-message-that-starts-with-a-mention/257269)._