pkp#7916 Applied html_entity_decode to return sanitized value

Author: touhidurabir

classes/core/PKPString.php

@@ -458,10 +458,10 @@ public static function stripUnsafeHtml(?string $input, string $key = 'allowed_ht
             $sanitizer = new HtmlSanitizer($config);
         }
 
-        return $sanitizer->sanitize(
-            strip_tags(
-                $input, 
-                $allowedTagToAttributeMap->keys()->toArray()
+        // need to apply html_entity_decode as sanitizer apply htmlentities internally for special chars
+        return html_entity_decode(
+            $sanitizer->sanitize(
+                strip_tags($input, $allowedTagToAttributeMap->keys()->toArray())
             )
         );
     }