From 16c1d12373c5e69efc92a11d0b71ef0d41f29572 Mon Sep 17 00:00:00 2001
From: Daniel Friesel <derf@finalrewind.org>
Date: Sat, 24 Apr 2021 09:11:18 +0200
Subject: remove arbitrary HTML tags from HAFAS HIMMessage attribute content

---
 lib/Travelynx/Helper/HAFAS.pm | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/lib/Travelynx/Helper/HAFAS.pm b/lib/Travelynx/Helper/HAFAS.pm
index c612238..a7c4abc 100644
--- a/lib/Travelynx/Helper/HAFAS.pm
+++ b/lib/Travelynx/Helper/HAFAS.pm
@@ -205,7 +205,14 @@ sub get_xml_p {
 
 			# Dito for <HIMMessage [...] lead="[...]<br>[...]">.
 			while ( $body
-				=~ s{<HIMMessage([^>]+)lead="([^"]*)<br/?>([^"=]*)"}{<HIMMessage$1lead="$2 $3"}s
+				=~ s{<HIMMessage([^>]+)lead="([^"]*)<br/?>([^"=]*)"}{<HIMMessage$1lead="$2 $3"}is
+			  )
+			{
+			}
+
+			# ... and any other HTML tag inside an XML attribute
+			while ( $body
+				=~ s{<HIMMessage([^>]+)lead="([^"]*)<[^>]+>([^"=]*)"}{<HIMMessage$1lead="$2$3"}is
 			  )
 			{
 			}
-- 
cgit v1.2.3