diff --git a/phpBB/includes/functions_post.php b/phpBB/includes/functions_post.php index 3be9937015..9328e8fa45 100644 --- a/phpBB/includes/functions_post.php +++ b/phpBB/includes/functions_post.php @@ -25,7 +25,7 @@ if (!defined('IN_PHPBB')) die('Hacking attempt'); } -$html_entities_match = array('#&#', '#<#', '#>#'); +$html_entities_match = array('#&(?!(\#[0-9]+;))#', '#<#', '#>#'); $html_entities_replace = array('&', '<', '>'); $unhtml_specialchars_match = array('#>#', '#<#', '#"#', '#&#');