UI Tag Input: 45126 remove encoding as it is...

...already encoded through the Tag Input code. Else the code is encoded incorrectly.

Also strip tags to prevent e.g. JavaScript injections.

https://mantis.ilias.de/view.php?id=45126

Author: lukastocker

src/UI/Implementation/Component/Input/Field/Renderer.php

@@ -373,7 +373,7 @@ protected function renderTagField(F\Tag $component): string
         if ($value) {
             $value = array_map(
                 function ($v) {
-                    return ['value' => urlencode($this->convertSpecialCharacters($v)), 'display' => $v];
+                    return ['value' => urlencode($v), 'display' => $v];
                 },
                 $value
             );

src/UI/Implementation/Component/Input/Field/Tag.php

@@ -75,7 +75,8 @@ protected function addAdditionalTransformations(): void
             if (count($v) == 1 && $v[0] === '') {
                 return [];
             }
-            return array_map("urldecode", $v);
+            $array = array_map("urldecode", $v);
+            return array_map('strip_tags', $array);
         }));
     }