Improve Parse Security in Support Feature

[stanleyowen]

Describe the bug
While sending description which contains issue(s) or enhancement(s), our customer services would like to read only a plain text without any html attribute. In this case, when an attacker send a malicious html code which may cause redirection to other pages and do malicious requests, which is often called as CSRF Attacks.

To Reproduce
Steps to reproduce the behavior:

1. Go to Support Page
2. Input html code inside the input field
3. Click on Send button
4. See inbox
5. See html code being parsed

Expected behavior
By parsing the users' input into pure unicode text will reduce the potential to CSRF or other attacks.

Desktop (please complete the following information):

• OS: Windows 10 OS Version 2009 (Build 19042.985)
• Browser Chrome
• Version 90.0.4430.212