Merge pull request #211 from MultiSafepay/remove-html-tags

Remove HTML tags from item name, item description in CartItem, and from order description in OrderRequest

Author: jissereitsma

CHANGELOG.md

@@ -5,6 +5,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ## [Unreleased]
+- Remove html tags from item name, item description in CartItem, and from order description in OrderRequest
 
 ## [4.0.0] - 2020-09-11
 ### Removed

src/Api/Transactions/OrderRequest/Arguments/Description.php

@@ -45,7 +45,7 @@ public function getData(): string
     {
         $this->validate();
 
-        return $this->description;
+        return strip_tags($this->description);
     }
 
     /**

src/ValueObject/CartItem.php

@@ -85,7 +85,7 @@ public static function fromData(array $data): CartItem
      */
     public function addName(string $name): CartItem
     {
-        $this->name = $name;
+        $this->name = strip_tags($name);
         return $this;
     }
 
@@ -167,7 +167,7 @@ public function addWeight(Weight $weight): CartItem
      */
     public function addDescription(string $description): CartItem
     {
-        $this->description = $description;
+        $this->description = strip_tags($description);
         return $this;
     }