how to prevent codes in gesior acc

[Sigoles]

How to prevent players from creating posts with html codes in the gesior acc forum?

some create posts with a redirect code for fake pages per example


jlcvp/GesiorMonteiro

tried something without success like:

if (strpos('javascript','script') !== false) {     echo 'error'; }

 

[slaw]

PHP htmlspecialchars() Function

 

[Raggaer]

Content Security Policy (CSP)