fix(description): simple text may render HTML tags

Signed-off-by: Thierry Bugier <[email protected]>

Author: btry

inc/field/descriptionfield.class.php

@@ -73,7 +73,7 @@ public function getValueForDesign() {
    public function getValueForTargetText($richText) {
       $text = $this->question->fields['description'];
       if (!$richText) {
-         $text = nl2br(html_entity_decode($text));
+         $text = nl2br(strip_tags(html_entity_decode($text)));
       }
 
       return $text;