Check and resolve conflicts with output of encoded characters. Allow tags in title, description and menu fields

[dimayakovlev]

User input stored in pages XML files filtered by calling:

filter_var($string, FILTER_SANITIZE_FULL_SPECIAL_CHARS);

1. On output there is the problem with double encode HTML symbols. To fix this needs to review security, template and theme functions. To preserve problems with output of not filtered or filtered differently strings call one of two:

   • <?php echo filter_var($string, FILTER_SANITIZE_FULL_SPECIAL_CHARS); ?>;
   • <?php echo htmlspecialchars($string, ENT_QUOTES, 'UTF-8', false); ?>;

2. Since HTML symbols stored encoded and on save applied function xss_clean(), there are no problems with tags in title, description and menu. Encoded symbols '<' and '>' will not be treated as HTML tags and will not broke anything in page but will not limit user with writing content. Anyway on output tags can be removed with function strip_tags().

All those changes needs to be tested well.