fix(targetchange): do not geenrate HTML for simple text fields

Signed-off-by: Thierry Bugier <tbugier@teclib.com>

Author: btry

inc/fields/textareafield.class.php

@@ -184,7 +184,12 @@ public function parseAnswerValues($input, $nonDestructive = false) {
    }
 
    public function getValueForTargetText($richText) {
-      return $this->value;
+      $value = $this->value;
+      if (!$richText) {
+         $value = Toolbox::unclean_cross_side_scripting_deep($value);
+         $value = strip_tags($value);
+      }
+      return $value;
    }
 
    public function equals($value) {

inc/targetchange.class.php

@@ -608,10 +608,10 @@ public function save(PluginFormcreatorFormAnswer $formanswer) {
          $data[$changeField] = $this->prepareTemplate(
             $this->fields[$changeField],
             $formanswer,
-            true
+            $changeField == 'content' // only content supports rich text
          );
 
-         $data[$changeField] = $formanswer->parseTags($data[$changeField], $this);
+         $data[$changeField] = $formanswer->parseTags($data[$changeField], $this, $changeField == 'content');
       }
 
       $data['_users_id_recipient']   = $_SESSION['glpiID'];