diff --git a/app/composer.json b/app/composer.json
index dada08d3b..d9672ff81 100644
--- a/app/composer.json
+++ b/app/composer.json
@@ -12,7 +12,8 @@
         "doctrine/dbal": "^3.3",
         "league/container": "^4.2.0",
         "mobiledetect/mobiledetectlib": "^2.8",
-        "psr/log": "^2.0"
+        "psr/log": "^2.0",
+        "symfony/html-sanitizer": "^7.2"
     },
     "require-dev": {
         "cakephp/bake": "^2.6",
diff --git a/app/composer.lock b/app/composer.lock
index 5979febac..f383754fd 100644
--- a/app/composer.lock
+++ b/app/composer.lock
@@ -4,7 +4,7 @@
         "Read more about it at https://getcomposer.org/doc/01-basic-usage.md#installing-dependencies",
         "This file is @generated automatically"
     ],
-    "content-hash": "f2f99645ddd782396dd920df29d7e787",
+    "content-hash": "0db20fb981b4b8c8d1f6b017df5c777f",
     "packages": [
         {
             "name": "cakephp/cakephp",
@@ -952,6 +952,247 @@
             ],
             "time": "2021-11-16T10:29:06+00:00"
         },
+        {
+            "name": "league/uri",
+            "version": "7.5.1",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/thephpleague/uri.git",
+                "reference": "81fb5145d2644324614cc532b28efd0215bda430"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/thephpleague/uri/zipball/81fb5145d2644324614cc532b28efd0215bda430",
+                "reference": "81fb5145d2644324614cc532b28efd0215bda430",
+                "shasum": ""
+            },
+            "require": {
+                "league/uri-interfaces": "^7.5",
+                "php": "^8.1"
+            },
+            "conflict": {
+                "league/uri-schemes": "^1.0"
+            },
+            "suggest": {
+                "ext-bcmath": "to improve IPV4 host parsing",
+                "ext-fileinfo": "to create Data URI from file contennts",
+                "ext-gmp": "to improve IPV4 host parsing",
+                "ext-intl": "to handle IDN host with the best performance",
+                "jeremykendall/php-domain-parser": "to resolve Public Suffix and Top Level Domain",
+                "league/uri-components": "Needed to easily manipulate URI objects components",
+                "php-64bit": "to improve IPV4 host parsing",
+                "symfony/polyfill-intl-idn": "to handle IDN host via the Symfony polyfill if ext-intl is not present"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "7.x-dev"
+                }
+            },
+            "autoload": {
+                "psr-4": {
+                    "League\\Uri\\": ""
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Ignace Nyamagana Butera",
+                    "email": "nyamsprod@gmail.com",
+                    "homepage": "https://nyamsprod.com"
+                }
+            ],
+            "description": "URI manipulation library",
+            "homepage": "https://uri.thephpleague.com",
+            "keywords": [
+                "data-uri",
+                "file-uri",
+                "ftp",
+                "hostname",
+                "http",
+                "https",
+                "middleware",
+                "parse_str",
+                "parse_url",
+                "psr-7",
+                "query-string",
+                "querystring",
+                "rfc3986",
+                "rfc3987",
+                "rfc6570",
+                "uri",
+                "uri-template",
+                "url",
+                "ws"
+            ],
+            "support": {
+                "docs": "https://uri.thephpleague.com",
+                "forum": "https://thephpleague.slack.com",
+                "issues": "https://github.com/thephpleague/uri-src/issues",
+                "source": "https://github.com/thephpleague/uri/tree/7.5.1"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sponsors/nyamsprod",
+                    "type": "github"
+                }
+            ],
+            "time": "2024-12-08T08:40:02+00:00"
+        },
+        {
+            "name": "league/uri-interfaces",
+            "version": "7.5.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/thephpleague/uri-interfaces.git",
+                "reference": "08cfc6c4f3d811584fb09c37e2849e6a7f9b0742"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/thephpleague/uri-interfaces/zipball/08cfc6c4f3d811584fb09c37e2849e6a7f9b0742",
+                "reference": "08cfc6c4f3d811584fb09c37e2849e6a7f9b0742",
+                "shasum": ""
+            },
+            "require": {
+                "ext-filter": "*",
+                "php": "^8.1",
+                "psr/http-factory": "^1",
+                "psr/http-message": "^1.1 || ^2.0"
+            },
+            "suggest": {
+                "ext-bcmath": "to improve IPV4 host parsing",
+                "ext-gmp": "to improve IPV4 host parsing",
+                "ext-intl": "to handle IDN host with the best performance",
+                "php-64bit": "to improve IPV4 host parsing",
+                "symfony/polyfill-intl-idn": "to handle IDN host via the Symfony polyfill if ext-intl is not present"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "7.x-dev"
+                }
+            },
+            "autoload": {
+                "psr-4": {
+                    "League\\Uri\\": ""
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Ignace Nyamagana Butera",
+                    "email": "nyamsprod@gmail.com",
+                    "homepage": "https://nyamsprod.com"
+                }
+            ],
+            "description": "Common interfaces and classes for URI representation and interaction",
+            "homepage": "https://uri.thephpleague.com",
+            "keywords": [
+                "data-uri",
+                "file-uri",
+                "ftp",
+                "hostname",
+                "http",
+                "https",
+                "parse_str",
+                "parse_url",
+                "psr-7",
+                "query-string",
+                "querystring",
+                "rfc3986",
+                "rfc3987",
+                "rfc6570",
+                "uri",
+                "url",
+                "ws"
+            ],
+            "support": {
+                "docs": "https://uri.thephpleague.com",
+                "forum": "https://thephpleague.slack.com",
+                "issues": "https://github.com/thephpleague/uri-src/issues",
+                "source": "https://github.com/thephpleague/uri-interfaces/tree/7.5.0"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sponsors/nyamsprod",
+                    "type": "github"
+                }
+            ],
+            "time": "2024-12-08T08:18:47+00:00"
+        },
+        {
+            "name": "masterminds/html5",
+            "version": "2.9.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/Masterminds/html5-php.git",
+                "reference": "f5ac2c0b0a2eefca70b2ce32a5809992227e75a6"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/Masterminds/html5-php/zipball/f5ac2c0b0a2eefca70b2ce32a5809992227e75a6",
+                "reference": "f5ac2c0b0a2eefca70b2ce32a5809992227e75a6",
+                "shasum": ""
+            },
+            "require": {
+                "ext-dom": "*",
+                "php": ">=5.3.0"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "^4.8.35 || ^5.7.21 || ^6 || ^7 || ^8 || ^9"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "2.7-dev"
+                }
+            },
+            "autoload": {
+                "psr-4": {
+                    "Masterminds\\": "src"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Matt Butcher",
+                    "email": "technosophos@gmail.com"
+                },
+                {
+                    "name": "Matt Farina",
+                    "email": "matt@mattfarina.com"
+                },
+                {
+                    "name": "Asmir Mustafic",
+                    "email": "goetas@gmail.com"
+                }
+            ],
+            "description": "An HTML5 parser and serializer.",
+            "homepage": "http://masterminds.github.io/html5-php",
+            "keywords": [
+                "HTML5",
+                "dom",
+                "html",
+                "parser",
+                "querypath",
+                "serializer",
+                "xml"
+            ],
+            "support": {
+                "issues": "https://github.com/Masterminds/html5-php/issues",
+                "source": "https://github.com/Masterminds/html5-php/tree/2.9.0"
+            },
+            "time": "2024-03-31T07:05:07+00:00"
+        },
         {
             "name": "mobiledetect/mobiledetectlib",
             "version": "2.8.45",
@@ -1875,6 +2116,75 @@
             ],
             "time": "2024-01-23T15:02:46+00:00"
         },
+        {
+            "name": "symfony/html-sanitizer",
+            "version": "v7.2.2",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/html-sanitizer.git",
+                "reference": "f6bc679b024e30f27e33815930a5b8b304c79813"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/html-sanitizer/zipball/f6bc679b024e30f27e33815930a5b8b304c79813",
+                "reference": "f6bc679b024e30f27e33815930a5b8b304c79813",
+                "shasum": ""
+            },
+            "require": {
+                "ext-dom": "*",
+                "league/uri": "^6.5|^7.0",
+                "masterminds/html5": "^2.7.2",
+                "php": ">=8.2"
+            },
+            "type": "library",
+            "autoload": {
+                "psr-4": {
+                    "Symfony\\Component\\HtmlSanitizer\\": ""
+                },
+                "exclude-from-classmap": [
+                    "/Tests/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Titouan Galopin",
+                    "email": "galopintitouan@gmail.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Provides an object-oriented API to sanitize untrusted HTML input for safe insertion into a document's DOM.",
+            "homepage": "https://symfony.com",
+            "keywords": [
+                "Purifier",
+                "html",
+                "sanitizer"
+            ],
+            "support": {
+                "source": "https://github.com/symfony/html-sanitizer/tree/v7.2.2"
+            },
+            "funding": [
+                {
+                    "url": "https://symfony.com/sponsor",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://github.com/fabpot",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2024-12-30T18:35:15+00:00"
+        },
         {
             "name": "symfony/polyfill-ctype",
             "version": "v1.29.0",
@@ -6435,6 +6745,6 @@
     "platform": {
         "php": ">=8.0"
     },
-    "platform-dev": [],
-    "plugin-api-version": "2.3.0"
+    "platform-dev": {},
+    "plugin-api-version": "2.6.0"
 }
diff --git a/app/resources/locales/en_US/error.po b/app/resources/locales/en_US/error.po
index 871a8b300..0e2a24829 100644
--- a/app/resources/locales/en_US/error.po
+++ b/app/resources/locales/en_US/error.po
@@ -190,9 +190,15 @@ msgstr "When this value is selected, {0} cannot be empty"
 msgid "input.invalid"
 msgstr "Invalid character found"
 
+msgid "input.invalid.brackets"
+msgstr "Invalid character found. Angle brackets ('<>') are disallowed."
+
 msgid "input.invalid.email"
 msgstr "The provided value is not a valid email address"
 
+msgid "input.invalid.html"
+msgstr "HTML should be well-formed, and non-standard attributes, <script>, and <style> tags are not allowed."
+
 msgid "input.invalid.prefix"
 msgstr "The provided value is not valid. \"{0}\" prefix is required"
 
diff --git a/app/src/Lib/Traits/ValidationTrait.php b/app/src/Lib/Traits/ValidationTrait.php
index 6c62548b2..d00f5ba9c 100644
--- a/app/src/Lib/Traits/ValidationTrait.php
+++ b/app/src/Lib/Traits/ValidationTrait.php
@@ -33,6 +33,8 @@
 use Cake\Database\Schema\TableSchemaInterface;
 use Cake\ORM\TableRegistry;
 use Cake\Validation\Validator;
+use Symfony\Component\HtmlSanitizer\HtmlSanitizer;
+use Symfony\Component\HtmlSanitizer\HtmlSanitizerConfig;
 
 trait ValidationTrait {
   /**
@@ -74,7 +76,7 @@ public function registerPrimaryKeyValidation(Validator $validator, array $primar
    * @param  string               $field          Field name
    * @param  bool                 $required       Whether this field is required
    * @param  string               $prefix         Require the value to start with $prefix
-   * @param  bool                 $validateInput  Whether to appli the validateInput rule
+   * @param  bool                 $validateInput  Whether to apply the validateInput rule
    * @return Validator            Cake Validator
    */
   
@@ -222,37 +224,62 @@ public function validateConditionalRequire($value, array $context) {
    *
    * @since  COmanage Registry v5.0.0
    * @param  string $value   Value to validate
-   * @param  array  $context Validation context
+   * @param  array  $context Optional validation context; accepts 'type' of 'html' (may be extended to include 'email', 'url' etc.
    * @return mixed  True if $value validates, or an error string otherwise
    */
   
   public function validateInput($value, array $context) {
     // By default, we'll accept anything except < and >. Arguably, we should accept
     // anything at all for input (and filter only on output), but this was agreed to
-    // as an extra "line of defense" against unsanitized HTML output, since there are
-    // currently no known cases where user-entered input should permit angle brackets.
+    // as an extra "line of defense" against unsanitized HTML output. Where user supplied
+    // HTML input is needed, we will pass the input through the Symfony HTML Sanitizer instead.
     
 // XXX we previously supported 'flags' and 'invalidchars' as arguments, do we still need to?
 // CFM-152 review the logic here
 
-    if(!empty($context['filter'])) {
-      // We use filter_var for consistency with the views, and simply check
-      // that we end up with the same string we started with.
-
-      $filtered = filter_var($value, $context['filter']);
-      
-      if($value != $filtered) {
-        // Mismatch, implying bad input
-        return __d('error', 'input.invalid');
+    if(!empty($context['type'])) {
+      switch($context['type']) {
+        case 'html':
+          // We are accepting HTML input. Pass it through the Symfony HTML Sanitizer to
+          // disallow dom elements like <script> and <style>.
+          $htmlSanitizer = new HtmlSanitizer(
+            // Allow all elements from the W3C Sanitizer API. This is more permissive than "allowSafeElements()".
+            // See: https://github.com/symfony/symfony/blob/7.2/src/Symfony/Component/HtmlSanitizer/Reference/W3CReference.php
+            (new HtmlSanitizerConfig())->allowStaticElements()
+          );
+          $sanitizedValue = $htmlSanitizer->sanitize($value);
+          
+          // Compare $value and $sanitizedValue to see if anything changed. Because white space and closing slashes
+          // can be significantly altered during sanitization, normalize the strings prior to comparison.
+          // (Unfortunately, the HtmlSanitizer does not generate a report on what it changed, which would be better.)
+          $valueNormalized = preg_replace(['/\s+/','/\//'], '', $value);
+          $sanitizedValueNormalized = preg_replace(['/\s+/','/\//'], '', $sanitizedValue);
+          // XXX Note: stripping forward slashes allows us to ignore the differences between <br> and <br/>
+          // (for example), but it also allows malformed tags such as <br////> or <div/></div> to get through.
+          
+          if($valueNormalized !== $sanitizedValueNormalized) {
+            // Disallowed HTML is in the input, so throw an error.
+            return __d('error', 'input.invalid.html');
+          }
+          
+          return true;
+        default:
+          // We use h() (htmlspecialchars) for consistency with the views.
+          // If we get here, simply check that we end up with the same string we started with
+          // once we pass the string through htmlspecialchars.
+          if($value != h($value)) {
+            // Mismatch, implying bad input
+            return __d('error', 'input.invalid');
+          }
       }
     } else {
-      // Perform a basic string search.
+      // Perform a basic string search
       
       $invalid = "<>";
       
       if(strlen($value) != strcspn($value, $invalid)) {
         // Mismatch, implying bad input
-        return __d('error', 'input.invalid.2');
+        return __d('error', 'input.invalid.brackets');
       }
       
       // We require at least one non-whitespace character (CO-1551)
diff --git a/app/src/Model/Table/MessageTemplatesTable.php b/app/src/Model/Table/MessageTemplatesTable.php
index 79381c71e..903897660 100644
--- a/app/src/Model/Table/MessageTemplatesTable.php
+++ b/app/src/Model/Table/MessageTemplatesTable.php
@@ -225,7 +225,7 @@ public function validationDefault(Validator $validator): Validator {
     $validator->allowEmptyString('body_text');
 
     $validator->add('body_html', [
-      'filter'  => ['rule'     => ['validateInput'],
+      'filter'  => ['rule'     => ['validateInput',['type' => 'html']],
                     'provider' => 'table']
     ]);
     $validator->allowEmptyString('body_html');
diff --git a/app/vendor/cakephp-plugins.php b/app/vendor/cakephp-plugins.php
index 3fd14ac37..d672f425f 100644
--- a/app/vendor/cakephp-plugins.php
+++ b/app/vendor/cakephp-plugins.php
@@ -11,6 +11,5 @@
         'CoreServer' => $baseDir . '/plugins/CoreServer/',
         'DebugKit' => $baseDir . '/vendor/cakephp/debug_kit/',
         'Migrations' => $baseDir . '/vendor/cakephp/migrations/',
-        'TestWidget' => $baseDir . '/plugins/TestWidget/',
     ],
 ];
diff --git a/app/vendor/composer/ClassLoader.php b/app/vendor/composer/ClassLoader.php
index a72151c77..7824d8f7e 100644
--- a/app/vendor/composer/ClassLoader.php
+++ b/app/vendor/composer/ClassLoader.php
@@ -45,35 +45,34 @@ class ClassLoader
     /** @var \Closure(string):void */
     private static $includeFile;
 
-    /** @var ?string */
+    /** @var string|null */
     private $vendorDir;
 
     // PSR-4
     /**
-     * @var array[]
-     * @psalm-var array<string, array<string, int>>
+     * @var array<string, array<string, int>>
      */
     private $prefixLengthsPsr4 = array();
     /**
-     * @var array[]
-     * @psalm-var array<string, array<int, string>>
+     * @var array<string, list<string>>
      */
     private $prefixDirsPsr4 = array();
     /**
-     * @var array[]
-     * @psalm-var array<string, string>
+     * @var list<string>
      */
     private $fallbackDirsPsr4 = array();
 
     // PSR-0
     /**
-     * @var array[]
-     * @psalm-var array<string, array<string, string[]>>
+     * List of PSR-0 prefixes
+     *
+     * Structured as array('F (first letter)' => array('Foo\Bar (full prefix)' => array('path', 'path2')))
+     *
+     * @var array<string, array<string, list<string>>>
      */
     private $prefixesPsr0 = array();
     /**
-     * @var array[]
-     * @psalm-var array<string, string>
+     * @var list<string>
      */
     private $fallbackDirsPsr0 = array();
 
@@ -81,8 +80,7 @@ class ClassLoader
     private $useIncludePath = false;
 
     /**
-     * @var string[]
-     * @psalm-var array<string, string>
+     * @var array<string, string>
      */
     private $classMap = array();
 
@@ -90,21 +88,20 @@ class ClassLoader
     private $classMapAuthoritative = false;
 
     /**
-     * @var bool[]
-     * @psalm-var array<string, bool>
+     * @var array<string, bool>
      */
     private $missingClasses = array();
 
-    /** @var ?string */
+    /** @var string|null */
     private $apcuPrefix;
 
     /**
-     * @var self[]
+     * @var array<string, self>
      */
     private static $registeredLoaders = array();
 
     /**
-     * @param ?string $vendorDir
+     * @param string|null $vendorDir
      */
     public function __construct($vendorDir = null)
     {
@@ -113,7 +110,7 @@ public function __construct($vendorDir = null)
     }
 
     /**
-     * @return string[]
+     * @return array<string, list<string>>
      */
     public function getPrefixes()
     {
@@ -125,8 +122,7 @@ public function getPrefixes()
     }
 
     /**
-     * @return array[]
-     * @psalm-return array<string, array<int, string>>
+     * @return array<string, list<string>>
      */
     public function getPrefixesPsr4()
     {
@@ -134,8 +130,7 @@ public function getPrefixesPsr4()
     }
 
     /**
-     * @return array[]
-     * @psalm-return array<string, string>
+     * @return list<string>
      */
     public function getFallbackDirs()
     {
@@ -143,8 +138,7 @@ public function getFallbackDirs()
     }
 
     /**
-     * @return array[]
-     * @psalm-return array<string, string>
+     * @return list<string>
      */
     public function getFallbackDirsPsr4()
     {
@@ -152,8 +146,7 @@ public function getFallbackDirsPsr4()
     }
 
     /**
-     * @return string[] Array of classname => path
-     * @psalm-return array<string, string>
+     * @return array<string, string> Array of classname => path
      */
     public function getClassMap()
     {
@@ -161,8 +154,7 @@ public function getClassMap()
     }
 
     /**
-     * @param string[] $classMap Class to filename map
-     * @psalm-param array<string, string> $classMap
+     * @param array<string, string> $classMap Class to filename map
      *
      * @return void
      */
@@ -179,24 +171,25 @@ public function addClassMap(array $classMap)
      * Registers a set of PSR-0 directories for a given prefix, either
      * appending or prepending to the ones previously set for this prefix.
      *
-     * @param string          $prefix  The prefix
-     * @param string[]|string $paths   The PSR-0 root directories
-     * @param bool            $prepend Whether to prepend the directories
+     * @param string              $prefix  The prefix
+     * @param list<string>|string $paths   The PSR-0 root directories
+     * @param bool                $prepend Whether to prepend the directories
      *
      * @return void
      */
     public function add($prefix, $paths, $prepend = false)
     {
+        $paths = (array) $paths;
         if (!$prefix) {
             if ($prepend) {
                 $this->fallbackDirsPsr0 = array_merge(
-                    (array) $paths,
+                    $paths,
                     $this->fallbackDirsPsr0
                 );
             } else {
                 $this->fallbackDirsPsr0 = array_merge(
                     $this->fallbackDirsPsr0,
-                    (array) $paths
+                    $paths
                 );
             }
 
@@ -205,19 +198,19 @@ public function add($prefix, $paths, $prepend = false)
 
         $first = $prefix[0];
         if (!isset($this->prefixesPsr0[$first][$prefix])) {
-            $this->prefixesPsr0[$first][$prefix] = (array) $paths;
+            $this->prefixesPsr0[$first][$prefix] = $paths;
 
             return;
         }
         if ($prepend) {
             $this->prefixesPsr0[$first][$prefix] = array_merge(
-                (array) $paths,
+                $paths,
                 $this->prefixesPsr0[$first][$prefix]
             );
         } else {
             $this->prefixesPsr0[$first][$prefix] = array_merge(
                 $this->prefixesPsr0[$first][$prefix],
-                (array) $paths
+                $paths
             );
         }
     }
@@ -226,9 +219,9 @@ public function add($prefix, $paths, $prepend = false)
      * Registers a set of PSR-4 directories for a given namespace, either
      * appending or prepending to the ones previously set for this namespace.
      *
-     * @param string          $prefix  The prefix/namespace, with trailing '\\'
-     * @param string[]|string $paths   The PSR-4 base directories
-     * @param bool            $prepend Whether to prepend the directories
+     * @param string              $prefix  The prefix/namespace, with trailing '\\'
+     * @param list<string>|string $paths   The PSR-4 base directories
+     * @param bool                $prepend Whether to prepend the directories
      *
      * @throws \InvalidArgumentException
      *
@@ -236,17 +229,18 @@ public function add($prefix, $paths, $prepend = false)
      */
     public function addPsr4($prefix, $paths, $prepend = false)
     {
+        $paths = (array) $paths;
         if (!$prefix) {
             // Register directories for the root namespace.
             if ($prepend) {
                 $this->fallbackDirsPsr4 = array_merge(
-                    (array) $paths,
+                    $paths,
                     $this->fallbackDirsPsr4
                 );
             } else {
                 $this->fallbackDirsPsr4 = array_merge(
                     $this->fallbackDirsPsr4,
-                    (array) $paths
+                    $paths
                 );
             }
         } elseif (!isset($this->prefixDirsPsr4[$prefix])) {
@@ -256,18 +250,18 @@ public function addPsr4($prefix, $paths, $prepend = false)
                 throw new \InvalidArgumentException("A non-empty PSR-4 prefix must end with a namespace separator.");
             }
             $this->prefixLengthsPsr4[$prefix[0]][$prefix] = $length;
-            $this->prefixDirsPsr4[$prefix] = (array) $paths;
+            $this->prefixDirsPsr4[$prefix] = $paths;
         } elseif ($prepend) {
             // Prepend directories for an already registered namespace.
             $this->prefixDirsPsr4[$prefix] = array_merge(
-                (array) $paths,
+                $paths,
                 $this->prefixDirsPsr4[$prefix]
             );
         } else {
             // Append directories for an already registered namespace.
             $this->prefixDirsPsr4[$prefix] = array_merge(
                 $this->prefixDirsPsr4[$prefix],
-                (array) $paths
+                $paths
             );
         }
     }
@@ -276,8 +270,8 @@ public function addPsr4($prefix, $paths, $prepend = false)
      * Registers a set of PSR-0 directories for a given prefix,
      * replacing any others previously set for this prefix.
      *
-     * @param string          $prefix The prefix
-     * @param string[]|string $paths  The PSR-0 base directories
+     * @param string              $prefix The prefix
+     * @param list<string>|string $paths  The PSR-0 base directories
      *
      * @return void
      */
@@ -294,8 +288,8 @@ public function set($prefix, $paths)
      * Registers a set of PSR-4 directories for a given namespace,
      * replacing any others previously set for this namespace.
      *
-     * @param string          $prefix The prefix/namespace, with trailing '\\'
-     * @param string[]|string $paths  The PSR-4 base directories
+     * @param string              $prefix The prefix/namespace, with trailing '\\'
+     * @param list<string>|string $paths  The PSR-4 base directories
      *
      * @throws \InvalidArgumentException
      *
@@ -481,9 +475,9 @@ public function findFile($class)
     }
 
     /**
-     * Returns the currently registered loaders indexed by their corresponding vendor directories.
+     * Returns the currently registered loaders keyed by their corresponding vendor directories.
      *
-     * @return self[]
+     * @return array<string, self>
      */
     public static function getRegisteredLoaders()
     {
diff --git a/app/vendor/composer/InstalledVersions.php b/app/vendor/composer/InstalledVersions.php
index c6b54af7b..51e734a77 100644
--- a/app/vendor/composer/InstalledVersions.php
+++ b/app/vendor/composer/InstalledVersions.php
@@ -98,7 +98,7 @@ public static function isInstalled($packageName, $includeDevRequirements = true)
     {
         foreach (self::getInstalled() as $installed) {
             if (isset($installed['versions'][$packageName])) {
-                return $includeDevRequirements || empty($installed['versions'][$packageName]['dev_requirement']);
+                return $includeDevRequirements || !isset($installed['versions'][$packageName]['dev_requirement']) || $installed['versions'][$packageName]['dev_requirement'] === false;
             }
         }
 
@@ -119,7 +119,7 @@ public static function isInstalled($packageName, $includeDevRequirements = true)
      */
     public static function satisfies(VersionParser $parser, $packageName, $constraint)
     {
-        $constraint = $parser->parseConstraints($constraint);
+        $constraint = $parser->parseConstraints((string) $constraint);
         $provided = $parser->parseConstraints(self::getVersionRanges($packageName));
 
         return $provided->matches($constraint);
@@ -328,7 +328,9 @@ private static function getInstalled()
                 if (isset(self::$installedByVendor[$vendorDir])) {
                     $installed[] = self::$installedByVendor[$vendorDir];
                 } elseif (is_file($vendorDir.'/composer/installed.php')) {
-                    $installed[] = self::$installedByVendor[$vendorDir] = require $vendorDir.'/composer/installed.php';
+                    /** @var array{root: array{name: string, pretty_version: string, version: string, reference: string|null, type: string, install_path: string, aliases: string[], dev: bool}, versions: array<string, array{pretty_version?: string, version?: string, reference?: string|null, type?: string, install_path?: string, aliases?: string[], dev_requirement: bool, replaced?: string[], provided?: string[]}>} $required */
+                    $required = require $vendorDir.'/composer/installed.php';
+                    $installed[] = self::$installedByVendor[$vendorDir] = $required;
                     if (null === self::$installed && strtr($vendorDir.'/composer', '\\', '/') === strtr(__DIR__, '\\', '/')) {
                         self::$installed = $installed[count($installed) - 1];
                     }
@@ -340,12 +342,17 @@ private static function getInstalled()
             // only require the installed.php file if this file is loaded from its dumped location,
             // and not from its source location in the composer/composer package, see https://github.com/composer/composer/issues/9937
             if (substr(__DIR__, -8, 1) !== 'C') {
-                self::$installed = require __DIR__ . '/installed.php';
+                /** @var array{root: array{name: string, pretty_version: string, version: string, reference: string|null, type: string, install_path: string, aliases: string[], dev: bool}, versions: array<string, array{pretty_version?: string, version?: string, reference?: string|null, type?: string, install_path?: string, aliases?: string[], dev_requirement: bool, replaced?: string[], provided?: string[]}>} $required */
+                $required = require __DIR__ . '/installed.php';
+                self::$installed = $required;
             } else {
                 self::$installed = array();
             }
         }
-        $installed[] = self::$installed;
+
+        if (self::$installed !== array()) {
+            $installed[] = self::$installed;
+        }
 
         return $installed;
     }
diff --git a/app/vendor/composer/autoload_psr4.php b/app/vendor/composer/autoload_psr4.php
index 6b5ff9040..699c8c5cf 100644
--- a/app/vendor/composer/autoload_psr4.php
+++ b/app/vendor/composer/autoload_psr4.php
@@ -8,8 +8,6 @@
 return array(
     'Twig\\Extra\\Markdown\\' => array($vendorDir . '/twig/markdown-extra'),
     'Twig\\' => array($vendorDir . '/twig/twig/src'),
-    'TestPlugin\\Test\\' => array($baseDir . '/availableplugins/TestPlugin/tests'),
-    'TestPlugin\\' => array($baseDir . '/availableplugins/TestPlugin/src'),
     'Symfony\\Polyfill\\Php81\\' => array($vendorDir . '/symfony/polyfill-php81'),
     'Symfony\\Polyfill\\Php80\\' => array($vendorDir . '/symfony/polyfill-php80'),
     'Symfony\\Polyfill\\Php73\\' => array($vendorDir . '/symfony/polyfill-php73'),
@@ -21,6 +19,7 @@
     'Symfony\\Component\\VarDumper\\' => array($vendorDir . '/symfony/var-dumper'),
     'Symfony\\Component\\String\\' => array($vendorDir . '/symfony/string'),
     'Symfony\\Component\\Process\\' => array($vendorDir . '/symfony/process'),
+    'Symfony\\Component\\HtmlSanitizer\\' => array($vendorDir . '/symfony/html-sanitizer'),
     'Symfony\\Component\\Finder\\' => array($vendorDir . '/symfony/finder'),
     'Symfony\\Component\\Filesystem\\' => array($vendorDir . '/symfony/filesystem'),
     'Symfony\\Component\\Console\\' => array($vendorDir . '/symfony/console'),
@@ -47,7 +46,9 @@
     'PHPStan\\PhpDocParser\\' => array($vendorDir . '/phpstan/phpdoc-parser/src'),
     'PHPCSStandards\\Composer\\Plugin\\Installers\\PHPCodeSniffer\\' => array($vendorDir . '/dealerdirect/phpcodesniffer-composer-installer/src'),
     'Migrations\\' => array($vendorDir . '/cakephp/migrations/src'),
+    'Masterminds\\' => array($vendorDir . '/masterminds/html5/src'),
     'M1\\Env\\' => array($vendorDir . '/m1/env/src'),
+    'League\\Uri\\' => array($vendorDir . '/league/uri', $vendorDir . '/league/uri-interfaces'),
     'League\\Container\\' => array($vendorDir . '/league/container/src'),
     'Laminas\\HttpHandlerRunner\\' => array($vendorDir . '/laminas/laminas-httphandlerrunner/src'),
     'Laminas\\Diactoros\\' => array($vendorDir . '/laminas/laminas-diactoros/src'),
@@ -66,8 +67,6 @@
     'DebugKit\\' => array($vendorDir . '/cakephp/debug_kit/src'),
     'CoreServer\\Test\\' => array($baseDir . '/plugins/CoreServer/tests'),
     'CoreServer\\' => array($baseDir . '/plugins/CoreServer/src'),
-    'CoreReport\\Test\\' => array($baseDir . '/availableplugins/CoreReport/tests'),
-    'CoreReport\\' => array($baseDir . '/availableplugins/CoreReport/src'),
     'CoreJob\\Test\\' => array($baseDir . '/plugins/CoreJob/tests'),
     'CoreJob\\' => array($baseDir . '/plugins/CoreJob/src'),
     'CoreEnroller\\Test\\' => array($baseDir . '/plugins/CoreEnroller/tests'),
diff --git a/app/vendor/composer/autoload_static.php b/app/vendor/composer/autoload_static.php
index 5d92df701..c44c7f527 100644
--- a/app/vendor/composer/autoload_static.php
+++ b/app/vendor/composer/autoload_static.php
@@ -51,8 +51,6 @@ class ComposerStaticInitb25f76eec921984aa94dcf4015a4846e
         array (
             'Twig\\Extra\\Markdown\\' => 20,
             'Twig\\' => 5,
-            'TestPlugin\\Test\\' => 16,
-            'TestPlugin\\' => 11,
         ),
         'S' => 
         array (
@@ -67,6 +65,7 @@ class ComposerStaticInitb25f76eec921984aa94dcf4015a4846e
             'Symfony\\Component\\VarDumper\\' => 28,
             'Symfony\\Component\\String\\' => 25,
             'Symfony\\Component\\Process\\' => 26,
+            'Symfony\\Component\\HtmlSanitizer\\' => 32,
             'Symfony\\Component\\Finder\\' => 25,
             'Symfony\\Component\\Filesystem\\' => 29,
             'Symfony\\Component\\Console\\' => 26,
@@ -102,10 +101,12 @@ class ComposerStaticInitb25f76eec921984aa94dcf4015a4846e
         'M' => 
         array (
             'Migrations\\' => 11,
+            'Masterminds\\' => 12,
             'M1\\Env\\' => 7,
         ),
         'L' => 
         array (
+            'League\\Uri\\' => 11,
             'League\\Container\\' => 17,
             'Laminas\\HttpHandlerRunner\\' => 26,
             'Laminas\\Diactoros\\' => 18,
@@ -136,8 +137,6 @@ class ComposerStaticInitb25f76eec921984aa94dcf4015a4846e
         array (
             'CoreServer\\Test\\' => 16,
             'CoreServer\\' => 11,
-            'CoreReport\\Test\\' => 16,
-            'CoreReport\\' => 11,
             'CoreJob\\Test\\' => 13,
             'CoreJob\\' => 8,
             'CoreEnroller\\Test\\' => 18,
@@ -182,14 +181,6 @@ class ComposerStaticInitb25f76eec921984aa94dcf4015a4846e
         array (
             0 => __DIR__ . '/..' . '/twig/twig/src',
         ),
-        'TestPlugin\\Test\\' => 
-        array (
-            0 => __DIR__ . '/../..' . '/availableplugins/TestPlugin/tests',
-        ),
-        'TestPlugin\\' => 
-        array (
-            0 => __DIR__ . '/../..' . '/availableplugins/TestPlugin/src',
-        ),
         'Symfony\\Polyfill\\Php81\\' => 
         array (
             0 => __DIR__ . '/..' . '/symfony/polyfill-php81',
@@ -234,6 +225,10 @@ class ComposerStaticInitb25f76eec921984aa94dcf4015a4846e
         array (
             0 => __DIR__ . '/..' . '/symfony/process',
         ),
+        'Symfony\\Component\\HtmlSanitizer\\' => 
+        array (
+            0 => __DIR__ . '/..' . '/symfony/html-sanitizer',
+        ),
         'Symfony\\Component\\Finder\\' => 
         array (
             0 => __DIR__ . '/..' . '/symfony/finder',
@@ -340,10 +335,19 @@ class ComposerStaticInitb25f76eec921984aa94dcf4015a4846e
         array (
             0 => __DIR__ . '/..' . '/cakephp/migrations/src',
         ),
+        'Masterminds\\' => 
+        array (
+            0 => __DIR__ . '/..' . '/masterminds/html5/src',
+        ),
         'M1\\Env\\' => 
         array (
             0 => __DIR__ . '/..' . '/m1/env/src',
         ),
+        'League\\Uri\\' => 
+        array (
+            0 => __DIR__ . '/..' . '/league/uri',
+            1 => __DIR__ . '/..' . '/league/uri-interfaces',
+        ),
         'League\\Container\\' => 
         array (
             0 => __DIR__ . '/..' . '/league/container/src',
@@ -416,14 +420,6 @@ class ComposerStaticInitb25f76eec921984aa94dcf4015a4846e
         array (
             0 => __DIR__ . '/../..' . '/plugins/CoreServer/src',
         ),
-        'CoreReport\\Test\\' => 
-        array (
-            0 => __DIR__ . '/../..' . '/availableplugins/CoreReport/tests',
-        ),
-        'CoreReport\\' => 
-        array (
-            0 => __DIR__ . '/../..' . '/availableplugins/CoreReport/src',
-        ),
         'CoreJob\\Test\\' => 
         array (
             0 => __DIR__ . '/../..' . '/plugins/CoreJob/tests',
diff --git a/app/vendor/composer/installed.json b/app/vendor/composer/installed.json
index ad73132a5..a2fd4c65a 100644
--- a/app/vendor/composer/installed.json
+++ b/app/vendor/composer/installed.json
@@ -2269,6 +2269,186 @@
             ],
             "install-path": "../league/container"
         },
+        {
+            "name": "league/uri",
+            "version": "7.5.1",
+            "version_normalized": "7.5.1.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/thephpleague/uri.git",
+                "reference": "81fb5145d2644324614cc532b28efd0215bda430"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/thephpleague/uri/zipball/81fb5145d2644324614cc532b28efd0215bda430",
+                "reference": "81fb5145d2644324614cc532b28efd0215bda430",
+                "shasum": ""
+            },
+            "require": {
+                "league/uri-interfaces": "^7.5",
+                "php": "^8.1"
+            },
+            "conflict": {
+                "league/uri-schemes": "^1.0"
+            },
+            "suggest": {
+                "ext-bcmath": "to improve IPV4 host parsing",
+                "ext-fileinfo": "to create Data URI from file contennts",
+                "ext-gmp": "to improve IPV4 host parsing",
+                "ext-intl": "to handle IDN host with the best performance",
+                "jeremykendall/php-domain-parser": "to resolve Public Suffix and Top Level Domain",
+                "league/uri-components": "Needed to easily manipulate URI objects components",
+                "php-64bit": "to improve IPV4 host parsing",
+                "symfony/polyfill-intl-idn": "to handle IDN host via the Symfony polyfill if ext-intl is not present"
+            },
+            "time": "2024-12-08T08:40:02+00:00",
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "7.x-dev"
+                }
+            },
+            "installation-source": "dist",
+            "autoload": {
+                "psr-4": {
+                    "League\\Uri\\": ""
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Ignace Nyamagana Butera",
+                    "email": "nyamsprod@gmail.com",
+                    "homepage": "https://nyamsprod.com"
+                }
+            ],
+            "description": "URI manipulation library",
+            "homepage": "https://uri.thephpleague.com",
+            "keywords": [
+                "data-uri",
+                "file-uri",
+                "ftp",
+                "hostname",
+                "http",
+                "https",
+                "middleware",
+                "parse_str",
+                "parse_url",
+                "psr-7",
+                "query-string",
+                "querystring",
+                "rfc3986",
+                "rfc3987",
+                "rfc6570",
+                "uri",
+                "uri-template",
+                "url",
+                "ws"
+            ],
+            "support": {
+                "docs": "https://uri.thephpleague.com",
+                "forum": "https://thephpleague.slack.com",
+                "issues": "https://github.com/thephpleague/uri-src/issues",
+                "source": "https://github.com/thephpleague/uri/tree/7.5.1"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sponsors/nyamsprod",
+                    "type": "github"
+                }
+            ],
+            "install-path": "../league/uri"
+        },
+        {
+            "name": "league/uri-interfaces",
+            "version": "7.5.0",
+            "version_normalized": "7.5.0.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/thephpleague/uri-interfaces.git",
+                "reference": "08cfc6c4f3d811584fb09c37e2849e6a7f9b0742"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/thephpleague/uri-interfaces/zipball/08cfc6c4f3d811584fb09c37e2849e6a7f9b0742",
+                "reference": "08cfc6c4f3d811584fb09c37e2849e6a7f9b0742",
+                "shasum": ""
+            },
+            "require": {
+                "ext-filter": "*",
+                "php": "^8.1",
+                "psr/http-factory": "^1",
+                "psr/http-message": "^1.1 || ^2.0"
+            },
+            "suggest": {
+                "ext-bcmath": "to improve IPV4 host parsing",
+                "ext-gmp": "to improve IPV4 host parsing",
+                "ext-intl": "to handle IDN host with the best performance",
+                "php-64bit": "to improve IPV4 host parsing",
+                "symfony/polyfill-intl-idn": "to handle IDN host via the Symfony polyfill if ext-intl is not present"
+            },
+            "time": "2024-12-08T08:18:47+00:00",
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "7.x-dev"
+                }
+            },
+            "installation-source": "dist",
+            "autoload": {
+                "psr-4": {
+                    "League\\Uri\\": ""
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Ignace Nyamagana Butera",
+                    "email": "nyamsprod@gmail.com",
+                    "homepage": "https://nyamsprod.com"
+                }
+            ],
+            "description": "Common interfaces and classes for URI representation and interaction",
+            "homepage": "https://uri.thephpleague.com",
+            "keywords": [
+                "data-uri",
+                "file-uri",
+                "ftp",
+                "hostname",
+                "http",
+                "https",
+                "parse_str",
+                "parse_url",
+                "psr-7",
+                "query-string",
+                "querystring",
+                "rfc3986",
+                "rfc3987",
+                "rfc6570",
+                "uri",
+                "url",
+                "ws"
+            ],
+            "support": {
+                "docs": "https://uri.thephpleague.com",
+                "forum": "https://thephpleague.slack.com",
+                "issues": "https://github.com/thephpleague/uri-src/issues",
+                "source": "https://github.com/thephpleague/uri-interfaces/tree/7.5.0"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sponsors/nyamsprod",
+                    "type": "github"
+                }
+            ],
+            "install-path": "../league/uri-interfaces"
+        },
         {
             "name": "m1/env",
             "version": "2.2.0",
@@ -2334,6 +2514,76 @@
             },
             "install-path": "../m1/env"
         },
+        {
+            "name": "masterminds/html5",
+            "version": "2.9.0",
+            "version_normalized": "2.9.0.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/Masterminds/html5-php.git",
+                "reference": "f5ac2c0b0a2eefca70b2ce32a5809992227e75a6"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/Masterminds/html5-php/zipball/f5ac2c0b0a2eefca70b2ce32a5809992227e75a6",
+                "reference": "f5ac2c0b0a2eefca70b2ce32a5809992227e75a6",
+                "shasum": ""
+            },
+            "require": {
+                "ext-dom": "*",
+                "php": ">=5.3.0"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "^4.8.35 || ^5.7.21 || ^6 || ^7 || ^8 || ^9"
+            },
+            "time": "2024-03-31T07:05:07+00:00",
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "2.7-dev"
+                }
+            },
+            "installation-source": "dist",
+            "autoload": {
+                "psr-4": {
+                    "Masterminds\\": "src"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Matt Butcher",
+                    "email": "technosophos@gmail.com"
+                },
+                {
+                    "name": "Matt Farina",
+                    "email": "matt@mattfarina.com"
+                },
+                {
+                    "name": "Asmir Mustafic",
+                    "email": "goetas@gmail.com"
+                }
+            ],
+            "description": "An HTML5 parser and serializer.",
+            "homepage": "http://masterminds.github.io/html5-php",
+            "keywords": [
+                "HTML5",
+                "dom",
+                "html",
+                "parser",
+                "querypath",
+                "serializer",
+                "xml"
+            ],
+            "support": {
+                "issues": "https://github.com/Masterminds/html5-php/issues",
+                "source": "https://github.com/Masterminds/html5-php/tree/2.9.0"
+            },
+            "install-path": "../masterminds/html5"
+        },
         {
             "name": "mobiledetect/mobiledetectlib",
             "version": "2.8.45",
@@ -5607,6 +5857,78 @@
             ],
             "install-path": "../symfony/finder"
         },
+        {
+            "name": "symfony/html-sanitizer",
+            "version": "v7.2.2",
+            "version_normalized": "7.2.2.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/html-sanitizer.git",
+                "reference": "f6bc679b024e30f27e33815930a5b8b304c79813"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/html-sanitizer/zipball/f6bc679b024e30f27e33815930a5b8b304c79813",
+                "reference": "f6bc679b024e30f27e33815930a5b8b304c79813",
+                "shasum": ""
+            },
+            "require": {
+                "ext-dom": "*",
+                "league/uri": "^6.5|^7.0",
+                "masterminds/html5": "^2.7.2",
+                "php": ">=8.2"
+            },
+            "time": "2024-12-30T18:35:15+00:00",
+            "type": "library",
+            "installation-source": "dist",
+            "autoload": {
+                "psr-4": {
+                    "Symfony\\Component\\HtmlSanitizer\\": ""
+                },
+                "exclude-from-classmap": [
+                    "/Tests/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Titouan Galopin",
+                    "email": "galopintitouan@gmail.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Provides an object-oriented API to sanitize untrusted HTML input for safe insertion into a document's DOM.",
+            "homepage": "https://symfony.com",
+            "keywords": [
+                "Purifier",
+                "html",
+                "sanitizer"
+            ],
+            "support": {
+                "source": "https://github.com/symfony/html-sanitizer/tree/v7.2.2"
+            },
+            "funding": [
+                {
+                    "url": "https://symfony.com/sponsor",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://github.com/fabpot",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
+                    "type": "tidelift"
+                }
+            ],
+            "install-path": "../symfony/html-sanitizer"
+        },
         {
             "name": "symfony/polyfill-ctype",
             "version": "v1.29.0",
diff --git a/app/vendor/composer/installed.php b/app/vendor/composer/installed.php
index 11d1a889f..64bb5e4c5 100644
--- a/app/vendor/composer/installed.php
+++ b/app/vendor/composer/installed.php
@@ -3,7 +3,7 @@
         'name' => 'cakephp/app',
         'pretty_version' => 'dev-develop',
         'version' => 'dev-develop',
-        'reference' => '6052370ed80e7dbfebc6de7332859ad1abee5446',
+        'reference' => 'd3454ff41d7456735e8553ca6919a2645f65754a',
         'type' => 'project',
         'install_path' => __DIR__ . '/../../',
         'aliases' => array(),
@@ -22,7 +22,7 @@
         'cakephp/app' => array(
             'pretty_version' => 'dev-develop',
             'version' => 'dev-develop',
-            'reference' => '6052370ed80e7dbfebc6de7332859ad1abee5446',
+            'reference' => 'd3454ff41d7456735e8553ca6919a2645f65754a',
             'type' => 'project',
             'install_path' => __DIR__ . '/../../',
             'aliases' => array(),
@@ -379,6 +379,24 @@
             'aliases' => array(),
             'dev_requirement' => false,
         ),
+        'league/uri' => array(
+            'pretty_version' => '7.5.1',
+            'version' => '7.5.1.0',
+            'reference' => '81fb5145d2644324614cc532b28efd0215bda430',
+            'type' => 'library',
+            'install_path' => __DIR__ . '/../league/uri',
+            'aliases' => array(),
+            'dev_requirement' => false,
+        ),
+        'league/uri-interfaces' => array(
+            'pretty_version' => '7.5.0',
+            'version' => '7.5.0.0',
+            'reference' => '08cfc6c4f3d811584fb09c37e2849e6a7f9b0742',
+            'type' => 'library',
+            'install_path' => __DIR__ . '/../league/uri-interfaces',
+            'aliases' => array(),
+            'dev_requirement' => false,
+        ),
         'm1/env' => array(
             'pretty_version' => '2.2.0',
             'version' => '2.2.0.0',
@@ -388,6 +406,15 @@
             'aliases' => array(),
             'dev_requirement' => true,
         ),
+        'masterminds/html5' => array(
+            'pretty_version' => '2.9.0',
+            'version' => '2.9.0.0',
+            'reference' => 'f5ac2c0b0a2eefca70b2ce32a5809992227e75a6',
+            'type' => 'library',
+            'install_path' => __DIR__ . '/../masterminds/html5',
+            'aliases' => array(),
+            'dev_requirement' => false,
+        ),
         'mobiledetect/mobiledetectlib' => array(
             'pretty_version' => '2.8.45',
             'version' => '2.8.45.0',
@@ -523,8 +550,8 @@
         'psr/container-implementation' => array(
             'dev_requirement' => false,
             'provided' => array(
-                0 => '^1.0',
-                1 => '^1.0 || ^2.0',
+                0 => '^1.0 || ^2.0',
+                1 => '^1.0',
             ),
         ),
         'psr/http-client' => array(
@@ -614,8 +641,8 @@
         'psr/log-implementation' => array(
             'dev_requirement' => false,
             'provided' => array(
-                0 => '1.0|2.0|3.0',
-                1 => '^1.0 || ^2.0',
+                0 => '^1.0 || ^2.0',
+                1 => '1.0|2.0|3.0',
             ),
         ),
         'psr/simple-cache' => array(
@@ -894,6 +921,15 @@
             'aliases' => array(),
             'dev_requirement' => true,
         ),
+        'symfony/html-sanitizer' => array(
+            'pretty_version' => 'v7.2.2',
+            'version' => '7.2.2.0',
+            'reference' => 'f6bc679b024e30f27e33815930a5b8b304c79813',
+            'type' => 'library',
+            'install_path' => __DIR__ . '/../symfony/html-sanitizer',
+            'aliases' => array(),
+            'dev_requirement' => false,
+        ),
         'symfony/polyfill-ctype' => array(
             'pretty_version' => 'v1.29.0',
             'version' => '1.29.0.0',
diff --git a/app/vendor/symfony/html-sanitizer/CHANGELOG.md b/app/vendor/symfony/html-sanitizer/CHANGELOG.md
new file mode 100644
index 000000000..b853e3c92
--- /dev/null
+++ b/app/vendor/symfony/html-sanitizer/CHANGELOG.md
@@ -0,0 +1,17 @@
+CHANGELOG
+=========
+
+7.2
+---
+
+ * Add support for configuring the default action to block or allow unconfigured elements instead of dropping them
+
+6.4
+---
+
+ * Add support for sanitizing unlimited length of HTML document
+
+6.1
+---
+
+ * Add the component as experimental
diff --git a/app/vendor/symfony/html-sanitizer/HtmlSanitizer.php b/app/vendor/symfony/html-sanitizer/HtmlSanitizer.php
new file mode 100644
index 000000000..430960edc
--- /dev/null
+++ b/app/vendor/symfony/html-sanitizer/HtmlSanitizer.php
@@ -0,0 +1,140 @@
+<?php
+
+/*
+ * This file is part of the Symfony package.
+ *
+ * (c) Fabien Potencier <fabien@symfony.com>
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace Symfony\Component\HtmlSanitizer;
+
+use Symfony\Component\HtmlSanitizer\Parser\MastermindsParser;
+use Symfony\Component\HtmlSanitizer\Parser\ParserInterface;
+use Symfony\Component\HtmlSanitizer\Reference\W3CReference;
+use Symfony\Component\HtmlSanitizer\TextSanitizer\StringSanitizer;
+use Symfony\Component\HtmlSanitizer\Visitor\DomVisitor;
+
+/**
+ * @author Titouan Galopin <galopintitouan@gmail.com>
+ */
+final class HtmlSanitizer implements HtmlSanitizerInterface
+{
+    private ParserInterface $parser;
+
+    /**
+     * @var array<string, DomVisitor>
+     */
+    private array $domVisitors = [];
+
+    public function __construct(
+        private HtmlSanitizerConfig $config,
+        ?ParserInterface $parser = null,
+    ) {
+        $this->config = $config;
+        $this->parser = $parser ?? new MastermindsParser();
+    }
+
+    public function sanitize(string $input): string
+    {
+        return $this->sanitizeWithContext(W3CReference::CONTEXT_BODY, $input);
+    }
+
+    public function sanitizeFor(string $element, string $input): string
+    {
+        return $this->sanitizeWithContext(
+            W3CReference::CONTEXTS_MAP[StringSanitizer::htmlLower($element)] ?? W3CReference::CONTEXT_BODY,
+            $input
+        );
+    }
+
+    private function sanitizeWithContext(string $context, string $input): string
+    {
+        // Text context: early return with HTML encoding
+        if (W3CReference::CONTEXT_TEXT === $context) {
+            return StringSanitizer::encodeHtmlEntities($input);
+        }
+
+        // Other context: build a DOM visitor
+        $this->domVisitors[$context] ??= $this->createDomVisitorForContext($context);
+
+        // Prevent DOS attack induced by extremely long HTML strings
+        if (-1 !== $this->config->getMaxInputLength() && \strlen($input) > $this->config->getMaxInputLength()) {
+            $input = substr($input, 0, $this->config->getMaxInputLength());
+        }
+
+        // Only operate on valid UTF-8 strings. This is necessary to prevent cross
+        // site scripting issues on Internet Explorer 6. Idea from Drupal (filter_xss).
+        if (!$this->isValidUtf8($input)) {
+            return '';
+        }
+
+        // Remove NULL character
+        $input = str_replace(\chr(0), '', $input);
+
+        // Parse as HTML
+        if (!$parsed = $this->parser->parse($input)) {
+            return '';
+        }
+
+        // Visit the DOM tree and render the sanitized nodes
+        return $this->domVisitors[$context]->visit($parsed)?->render() ?? '';
+    }
+
+    private function isValidUtf8(string $html): bool
+    {
+        // preg_match() fails silently on strings containing invalid UTF-8.
+        return '' === $html || preg_match('//u', $html);
+    }
+
+    private function createDomVisitorForContext(string $context): DomVisitor
+    {
+        $elementsConfig = [];
+
+        // Head: only a few elements are allowed
+        if (W3CReference::CONTEXT_HEAD === $context) {
+            foreach ($this->config->getAllowedElements() as $allowedElement => $allowedAttributes) {
+                if (\array_key_exists($allowedElement, W3CReference::HEAD_ELEMENTS)) {
+                    $elementsConfig[$allowedElement] = $allowedAttributes;
+                }
+            }
+
+            foreach ($this->config->getBlockedElements() as $blockedElement => $v) {
+                if (\array_key_exists($blockedElement, W3CReference::HEAD_ELEMENTS)) {
+                    $elementsConfig[$blockedElement] = HtmlSanitizerAction::Block;
+                }
+            }
+
+            foreach ($this->config->getDroppedElements() as $droppedElement => $v) {
+                if (\array_key_exists($droppedElement, W3CReference::HEAD_ELEMENTS)) {
+                    $elementsConfig[$droppedElement] = HtmlSanitizerAction::Drop;
+                }
+            }
+
+            return new DomVisitor($this->config, $elementsConfig);
+        }
+
+        // Body: allow any configured element that isn't in <head>
+        foreach ($this->config->getAllowedElements() as $allowedElement => $allowedAttributes) {
+            if (!\array_key_exists($allowedElement, W3CReference::HEAD_ELEMENTS)) {
+                $elementsConfig[$allowedElement] = $allowedAttributes;
+            }
+        }
+
+        foreach ($this->config->getBlockedElements() as $blockedElement => $v) {
+            if (!\array_key_exists($blockedElement, W3CReference::HEAD_ELEMENTS)) {
+                $elementsConfig[$blockedElement] = HtmlSanitizerAction::Block;
+            }
+        }
+
+        foreach ($this->config->getDroppedElements() as $droppedElement => $v) {
+            if (!\array_key_exists($droppedElement, W3CReference::HEAD_ELEMENTS)) {
+                $elementsConfig[$droppedElement] = HtmlSanitizerAction::Drop;
+            }
+        }
+
+        return new DomVisitor($this->config, $elementsConfig);
+    }
+}
diff --git a/app/vendor/symfony/html-sanitizer/HtmlSanitizerAction.php b/app/vendor/symfony/html-sanitizer/HtmlSanitizerAction.php
new file mode 100644
index 000000000..6352533c3
--- /dev/null
+++ b/app/vendor/symfony/html-sanitizer/HtmlSanitizerAction.php
@@ -0,0 +1,30 @@
+<?php
+
+/*
+ * This file is part of the Symfony package.
+ *
+ * (c) Fabien Potencier <fabien@symfony.com>
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace Symfony\Component\HtmlSanitizer;
+
+enum HtmlSanitizerAction: string
+{
+    /**
+     * Dropped elements are elements the sanitizer should remove from the input, including their children.
+     */
+    case Drop = 'drop';
+
+    /**
+     * Blocked elements are elements the sanitizer should remove from the input, but retain their children.
+     */
+    case Block = 'block';
+
+    /**
+     * Allowed elements are elements the sanitizer should retain from the input.
+     */
+    case Allow = 'allow';
+}
diff --git a/app/vendor/symfony/html-sanitizer/HtmlSanitizerConfig.php b/app/vendor/symfony/html-sanitizer/HtmlSanitizerConfig.php
new file mode 100644
index 000000000..f7b0b0523
--- /dev/null
+++ b/app/vendor/symfony/html-sanitizer/HtmlSanitizerConfig.php
@@ -0,0 +1,544 @@
+<?php
+
+/*
+ * This file is part of the Symfony package.
+ *
+ * (c) Fabien Potencier <fabien@symfony.com>
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace Symfony\Component\HtmlSanitizer;
+
+use Symfony\Component\HtmlSanitizer\Reference\W3CReference;
+use Symfony\Component\HtmlSanitizer\Visitor\AttributeSanitizer\AttributeSanitizerInterface;
+
+/**
+ * @author Titouan Galopin <galopintitouan@gmail.com>
+ */
+class HtmlSanitizerConfig
+{
+    private HtmlSanitizerAction $defaultAction = HtmlSanitizerAction::Drop;
+
+    /**
+     * Elements that should be removed.
+     *
+     * @var array<string, true>
+     */
+    private array $droppedElements = [];
+
+    /**
+     * Elements that should be removed but their children should be retained.
+     *
+     * @var array<string, true>
+     */
+    private array $blockedElements = [];
+
+    /**
+     * Elements that should be retained, with their allowed attributes.
+     *
+     * @var array<string, array<string, true>>
+     */
+    private array $allowedElements = [];
+
+    /**
+     * Attributes that should always be added to certain elements.
+     *
+     * @var array<string, array<string, string>>
+     */
+    private array $forcedAttributes = [];
+
+    /**
+     * Links schemes that should be retained, other being dropped.
+     *
+     * @var list<string>
+     */
+    private array $allowedLinkSchemes = ['http', 'https', 'mailto', 'tel'];
+
+    /**
+     * Links hosts that should be retained (by default, all hosts are allowed).
+     *
+     * @var list<string>|null
+     */
+    private ?array $allowedLinkHosts = null;
+
+    /**
+     * Should the sanitizer allow relative links (by default, they are dropped).
+     */
+    private bool $allowRelativeLinks = false;
+
+    /**
+     * Image/Audio/Video schemes that should be retained, other being dropped.
+     *
+     * @var list<string>
+     */
+    private array $allowedMediaSchemes = ['http', 'https', 'data'];
+
+    /**
+     * Image/Audio/Video hosts that should be retained (by default, all hosts are allowed).
+     *
+     * @var list<string>|null
+     */
+    private ?array $allowedMediaHosts = null;
+
+    /**
+     * Should the sanitizer allow relative media URL (by default, they are dropped).
+     */
+    private bool $allowRelativeMedias = false;
+
+    /**
+     * Should the URL in the sanitized document be transformed to HTTPS if they are using HTTP.
+     */
+    private bool $forceHttpsUrls = false;
+
+    /**
+     * Sanitizers that should be applied to specific attributes in addition to standard sanitization.
+     *
+     * @var list<AttributeSanitizerInterface>
+     */
+    private array $attributeSanitizers;
+
+    private int $maxInputLength = 20_000;
+
+    public function __construct()
+    {
+        $this->attributeSanitizers = [
+            new Visitor\AttributeSanitizer\UrlAttributeSanitizer(),
+        ];
+    }
+
+    /**
+     * Sets the default action for elements which are not otherwise specifically allowed or blocked.
+     *
+     * Note that a default action of Allow will allow all tags but they will not have any attributes.
+     */
+    public function defaultAction(HtmlSanitizerAction $action): static
+    {
+        $clone = clone $this;
+        $clone->defaultAction = $action;
+
+        return $clone;
+    }
+
+    /**
+     * Allows all static elements and attributes from the W3C Sanitizer API standard.
+     *
+     * All scripts will be removed but the output may still contain other dangerous
+     * behaviors like CSS injection (click-jacking), CSS expressions, ...
+     */
+    public function allowStaticElements(): static
+    {
+        $elements = array_merge(
+            array_keys(W3CReference::HEAD_ELEMENTS),
+            array_keys(W3CReference::BODY_ELEMENTS)
+        );
+
+        $clone = clone $this;
+        foreach ($elements as $element) {
+            $clone = $clone->allowElement($element, '*');
+        }
+
+        return $clone;
+    }
+
+    /**
+     * Allows "safe" elements and attributes.
+     *
+     * All scripts will be removed, as well as other dangerous behaviors like CSS injection.
+     */
+    public function allowSafeElements(): static
+    {
+        $attributes = [];
+        foreach (W3CReference::ATTRIBUTES as $attribute => $isSafe) {
+            if ($isSafe) {
+                $attributes[] = $attribute;
+            }
+        }
+
+        $clone = clone $this;
+
+        foreach (W3CReference::HEAD_ELEMENTS as $element => $isSafe) {
+            if ($isSafe) {
+                $clone = $clone->allowElement($element, $attributes);
+            }
+        }
+
+        foreach (W3CReference::BODY_ELEMENTS as $element => $isSafe) {
+            if ($isSafe) {
+                $clone = $clone->allowElement($element, $attributes);
+            }
+        }
+
+        return $clone;
+    }
+
+    /**
+     * Allows only a given list of schemes to be used in links href attributes.
+     *
+     * All other schemes will be dropped.
+     *
+     * @param list<string> $allowLinkSchemes
+     */
+    public function allowLinkSchemes(array $allowLinkSchemes): static
+    {
+        $clone = clone $this;
+        $clone->allowedLinkSchemes = $allowLinkSchemes;
+
+        return $clone;
+    }
+
+    /**
+     * Allows only a given list of hosts to be used in links href attributes.
+     *
+     * All other hosts will be dropped. By default all hosts are allowed
+     * ($allowedLinkHosts = null).
+     *
+     * @param list<string>|null $allowLinkHosts
+     */
+    public function allowLinkHosts(?array $allowLinkHosts): static
+    {
+        $clone = clone $this;
+        $clone->allowedLinkHosts = $allowLinkHosts;
+
+        return $clone;
+    }
+
+    /**
+     * Allows relative URLs to be used in links href attributes.
+     */
+    public function allowRelativeLinks(bool $allowRelativeLinks = true): static
+    {
+        $clone = clone $this;
+        $clone->allowRelativeLinks = $allowRelativeLinks;
+
+        return $clone;
+    }
+
+    /**
+     * Allows only a given list of schemes to be used in media source attributes (img, audio, video, ...).
+     *
+     * All other schemes will be dropped.
+     *
+     * @param list<string> $allowMediaSchemes
+     */
+    public function allowMediaSchemes(array $allowMediaSchemes): static
+    {
+        $clone = clone $this;
+        $clone->allowedMediaSchemes = $allowMediaSchemes;
+
+        return $clone;
+    }
+
+    /**
+     * Allows only a given list of hosts to be used in media source attributes (img, audio, video, ...).
+     *
+     * All other hosts will be dropped. By default all hosts are allowed
+     * ($allowMediaHosts = null).
+     *
+     * @param list<string>|null $allowMediaHosts
+     */
+    public function allowMediaHosts(?array $allowMediaHosts): static
+    {
+        $clone = clone $this;
+        $clone->allowedMediaHosts = $allowMediaHosts;
+
+        return $clone;
+    }
+
+    /**
+     * Allows relative URLs to be used in media source attributes (img, audio, video, ...).
+     */
+    public function allowRelativeMedias(bool $allowRelativeMedias = true): static
+    {
+        $clone = clone $this;
+        $clone->allowRelativeMedias = $allowRelativeMedias;
+
+        return $clone;
+    }
+
+    /**
+     * Transforms URLs using the HTTP scheme to use the HTTPS scheme instead.
+     */
+    public function forceHttpsUrls(bool $forceHttpsUrls = true): static
+    {
+        $clone = clone $this;
+        $clone->forceHttpsUrls = $forceHttpsUrls;
+
+        return $clone;
+    }
+
+    /**
+     * Configures the given element as allowed.
+     *
+     * Allowed elements are elements the sanitizer should retain from the input.
+     *
+     * A list of allowed attributes for this element can be passed as a second argument.
+     * Passing "*" will allow all standard attributes on this element. By default, no
+     * attributes are allowed on the element.
+     *
+     * @param list<string>|string $allowedAttributes
+     */
+    public function allowElement(string $element, array|string $allowedAttributes = []): static
+    {
+        $clone = clone $this;
+
+        // Unblock/undrop the element if necessary
+        unset($clone->blockedElements[$element], $clone->droppedElements[$element]);
+
+        $clone->allowedElements[$element] = [];
+
+        $attrs = ('*' === $allowedAttributes) ? array_keys(W3CReference::ATTRIBUTES) : (array) $allowedAttributes;
+        foreach ($attrs as $allowedAttr) {
+            $clone->allowedElements[$element][$allowedAttr] = true;
+        }
+
+        return $clone;
+    }
+
+    /**
+     * Configures the given element as blocked.
+     *
+     * Blocked elements are elements the sanitizer should remove from the input, but retain
+     * their children.
+     */
+    public function blockElement(string $element): static
+    {
+        $clone = clone $this;
+
+        // Disallow/undrop the element if necessary
+        unset($clone->allowedElements[$element], $clone->droppedElements[$element]);
+
+        $clone->blockedElements[$element] = true;
+
+        return $clone;
+    }
+
+    /**
+     * Configures the given element as dropped.
+     *
+     * Dropped elements are elements the sanitizer should remove from the input, including
+     * their children.
+     *
+     * Note: when using an empty configuration, all unknown elements are dropped
+     * automatically. This method let you drop elements that were allowed earlier
+     * in the configuration, or explicitly drop some if you changed the default action.
+     */
+    public function dropElement(string $element): static
+    {
+        $clone = clone $this;
+        unset($clone->allowedElements[$element], $clone->blockedElements[$element]);
+
+        $clone->droppedElements[$element] = true;
+
+        return $clone;
+    }
+
+    /**
+     * Configures the given attribute as allowed.
+     *
+     * Allowed attributes are attributes the sanitizer should retain from the input.
+     *
+     * A list of allowed elements for this attribute can be passed as a second argument.
+     * Passing "*" will allow all currently allowed elements to use this attribute.
+     *
+     * @param list<string>|string $allowedElements
+     */
+    public function allowAttribute(string $attribute, array|string $allowedElements): static
+    {
+        $clone = clone $this;
+        $allowedElements = ('*' === $allowedElements) ? array_keys($clone->allowedElements) : (array) $allowedElements;
+
+        // For each configured element ...
+        foreach ($clone->allowedElements as $element => $attrs) {
+            if (\in_array($element, $allowedElements, true)) {
+                // ... if the attribute should be allowed, add it
+                $clone->allowedElements[$element][$attribute] = true;
+            } else {
+                // ... if the attribute should not be allowed, remove it
+                unset($clone->allowedElements[$element][$attribute]);
+            }
+        }
+
+        return $clone;
+    }
+
+    /**
+     * Configures the given attribute as dropped.
+     *
+     * Dropped attributes are attributes the sanitizer should remove from the input.
+     *
+     * A list of elements on which to drop this attribute can be passed as a second argument.
+     * Passing "*" will drop this attribute from all currently allowed elements.
+     *
+     * Note: when using an empty configuration, all unknown attributes are dropped
+     * automatically. This method let you drop attributes that were allowed earlier
+     * in the configuration.
+     *
+     * @param list<string>|string $droppedElements
+     */
+    public function dropAttribute(string $attribute, array|string $droppedElements): static
+    {
+        $clone = clone $this;
+        $droppedElements = ('*' === $droppedElements) ? array_keys($clone->allowedElements) : (array) $droppedElements;
+
+        foreach ($droppedElements as $element) {
+            if (isset($clone->allowedElements[$element][$attribute])) {
+                unset($clone->allowedElements[$element][$attribute]);
+            }
+        }
+
+        return $clone;
+    }
+
+    /**
+     * Forcefully set the value of a given attribute on a given element.
+     *
+     * The attribute will be created on the nodes if it didn't exist.
+     */
+    public function forceAttribute(string $element, string $attribute, string $value): static
+    {
+        $clone = clone $this;
+        $clone->forcedAttributes[$element][$attribute] = $value;
+
+        return $clone;
+    }
+
+    /**
+     * Registers a custom attribute sanitizer.
+     */
+    public function withAttributeSanitizer(AttributeSanitizerInterface $sanitizer): static
+    {
+        $clone = clone $this;
+        $clone->attributeSanitizers[] = $sanitizer;
+
+        return $clone;
+    }
+
+    /**
+     * Unregisters a custom attribute sanitizer.
+     */
+    public function withoutAttributeSanitizer(AttributeSanitizerInterface $sanitizer): static
+    {
+        $clone = clone $this;
+        $clone->attributeSanitizers = array_values(array_filter(
+            $this->attributeSanitizers,
+            static fn ($current) => $current !== $sanitizer
+        ));
+
+        return $clone;
+    }
+
+    /**
+     * @param int $maxInputLength The maximum length of the input string in bytes
+     *                            -1 means no limit
+     */
+    public function withMaxInputLength(int $maxInputLength): static
+    {
+        if ($maxInputLength < -1) {
+            throw new \InvalidArgumentException(\sprintf('The maximum input length must be greater than -1, "%d" given.', $maxInputLength));
+        }
+
+        $clone = clone $this;
+        $clone->maxInputLength = $maxInputLength;
+
+        return $clone;
+    }
+
+    public function getMaxInputLength(): int
+    {
+        return $this->maxInputLength;
+    }
+
+    public function getDefaultAction(): HtmlSanitizerAction
+    {
+        return $this->defaultAction;
+    }
+
+    /**
+     * @return array<string, array<string, true>>
+     */
+    public function getAllowedElements(): array
+    {
+        return $this->allowedElements;
+    }
+
+    /**
+     * @return array<string, true>
+     */
+    public function getBlockedElements(): array
+    {
+        return $this->blockedElements;
+    }
+
+    /**
+     * @return array<string, true>
+     */
+    public function getDroppedElements(): array
+    {
+        return $this->droppedElements;
+    }
+
+    /**
+     * @return array<string, array<string, string>>
+     */
+    public function getForcedAttributes(): array
+    {
+        return $this->forcedAttributes;
+    }
+
+    /**
+     * @return list<string>
+     */
+    public function getAllowedLinkSchemes(): array
+    {
+        return $this->allowedLinkSchemes;
+    }
+
+    /**
+     * @return list<string>|null
+     */
+    public function getAllowedLinkHosts(): ?array
+    {
+        return $this->allowedLinkHosts;
+    }
+
+    public function getAllowRelativeLinks(): bool
+    {
+        return $this->allowRelativeLinks;
+    }
+
+    /**
+     * @return list<string>
+     */
+    public function getAllowedMediaSchemes(): array
+    {
+        return $this->allowedMediaSchemes;
+    }
+
+    /**
+     * @return list<string>|null
+     */
+    public function getAllowedMediaHosts(): ?array
+    {
+        return $this->allowedMediaHosts;
+    }
+
+    public function getAllowRelativeMedias(): bool
+    {
+        return $this->allowRelativeMedias;
+    }
+
+    public function getForceHttpsUrls(): bool
+    {
+        return $this->forceHttpsUrls;
+    }
+
+    /**
+     * @return list<AttributeSanitizerInterface>
+     */
+    public function getAttributeSanitizers(): array
+    {
+        return $this->attributeSanitizers;
+    }
+}
diff --git a/app/vendor/symfony/html-sanitizer/HtmlSanitizerInterface.php b/app/vendor/symfony/html-sanitizer/HtmlSanitizerInterface.php
new file mode 100644
index 000000000..f68d9944f
--- /dev/null
+++ b/app/vendor/symfony/html-sanitizer/HtmlSanitizerInterface.php
@@ -0,0 +1,42 @@
+<?php
+
+/*
+ * This file is part of the Symfony package.
+ *
+ * (c) Fabien Potencier <fabien@symfony.com>
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace Symfony\Component\HtmlSanitizer;
+
+/**
+ * Sanitizes an untrusted HTML input for safe insertion into a document's DOM.
+ *
+ * This interface is inspired by the W3C Standard Draft about a HTML Sanitizer API
+ * ({@see https://wicg.github.io/sanitizer-api/}).
+ *
+ * @author Titouan Galopin <galopintitouan@gmail.com>
+ */
+interface HtmlSanitizerInterface
+{
+    /**
+     * Sanitizes an untrusted HTML input for a <body> context.
+     *
+     * This method is NOT context sensitive: it assumes the returned HTML string
+     * will be injected in a "body" context, and therefore will drop tags only
+     * allowed in the "head" element. To sanitize a string for injection
+     * in the "head" element, use {@see HtmlSanitizerInterface::sanitizeFor()}.
+     */
+    public function sanitize(string $input): string;
+
+    /**
+     * Sanitizes an untrusted HTML input for a given context.
+     *
+     * This method is context sensitive: by providing a parent element name
+     * (body, head, title, ...), the sanitizer will adapt its rules to only
+     * allow elements that are valid inside the given parent element.
+     */
+    public function sanitizeFor(string $element, string $input): string;
+}
diff --git a/app/vendor/symfony/html-sanitizer/LICENSE b/app/vendor/symfony/html-sanitizer/LICENSE
new file mode 100644
index 000000000..99c6bdf35
--- /dev/null
+++ b/app/vendor/symfony/html-sanitizer/LICENSE
@@ -0,0 +1,19 @@
+Copyright (c) 2021-present Fabien Potencier
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is furnished
+to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
diff --git a/app/vendor/symfony/html-sanitizer/Parser/MastermindsParser.php b/app/vendor/symfony/html-sanitizer/Parser/MastermindsParser.php
new file mode 100644
index 000000000..b49849bd2
--- /dev/null
+++ b/app/vendor/symfony/html-sanitizer/Parser/MastermindsParser.php
@@ -0,0 +1,29 @@
+<?php
+
+/*
+ * This file is part of the Symfony package.
+ *
+ * (c) Fabien Potencier <fabien@symfony.com>
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace Symfony\Component\HtmlSanitizer\Parser;
+
+use Masterminds\HTML5;
+
+/**
+ * @author Titouan Galopin <galopintitouan@gmail.com>
+ */
+final class MastermindsParser implements ParserInterface
+{
+    public function __construct(private array $defaultOptions = [])
+    {
+    }
+
+    public function parse(string $html): ?\DOMNode
+    {
+        return (new HTML5($this->defaultOptions))->loadHTMLFragment($html);
+    }
+}
diff --git a/app/vendor/symfony/html-sanitizer/Parser/ParserInterface.php b/app/vendor/symfony/html-sanitizer/Parser/ParserInterface.php
new file mode 100644
index 000000000..1a12b450c
--- /dev/null
+++ b/app/vendor/symfony/html-sanitizer/Parser/ParserInterface.php
@@ -0,0 +1,27 @@
+<?php
+
+/*
+ * This file is part of the Symfony package.
+ *
+ * (c) Fabien Potencier <fabien@symfony.com>
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace Symfony\Component\HtmlSanitizer\Parser;
+
+/**
+ * Transforms an untrusted HTML input string into a DOM tree.
+ *
+ * @author Titouan Galopin <galopintitouan@gmail.com>
+ */
+interface ParserInterface
+{
+    /**
+     * Parse a given string and returns a DOMNode tree.
+     *
+     * This method must return null if the string cannot be parsed as HTML.
+     */
+    public function parse(string $html): ?\DOMNode;
+}
diff --git a/app/vendor/symfony/html-sanitizer/README.md b/app/vendor/symfony/html-sanitizer/README.md
new file mode 100644
index 000000000..f528da047
--- /dev/null
+++ b/app/vendor/symfony/html-sanitizer/README.md
@@ -0,0 +1,115 @@
+HtmlSanitizer Component
+=======================
+
+The HtmlSanitizer component provides an object-oriented API to sanitize
+untrusted HTML input for safe insertion into a document's DOM.
+
+Usage
+-----
+
+```php
+use Symfony\Component\HtmlSanitizer\HtmlSanitizerConfig;
+use Symfony\Component\HtmlSanitizer\HtmlSanitizer;
+
+// By default, an element not added to the allowed or blocked elements
+// will be dropped, including its children
+$config = (new HtmlSanitizerConfig())
+    // Allow "safe" elements and attributes. All scripts will be removed
+    // as well as other dangerous behaviors like CSS injection
+    ->allowSafeElements()
+
+    // Allow all static elements and attributes from the W3C Sanitizer API
+    // standard. All scripts will be removed but the output may still contain
+    // other dangerous behaviors like CSS injection (click-jacking), CSS
+    // expressions, ...
+    ->allowStaticElements()
+
+    // Allow the "div" element and no attribute can be on it
+    ->allowElement('div')
+
+    // Allow the "a" element, and the "title" attribute to be on it
+    ->allowElement('a', ['title'])
+
+    // Allow the "span" element, and any attribute from the Sanitizer API is allowed
+    // (see https://wicg.github.io/sanitizer-api/#default-configuration)
+    ->allowElement('span', '*')
+
+    // Block the "section" element: this element will be removed but
+    // its children will be retained
+    ->blockElement('section')
+
+    // Drop the "div" element: this element will be removed, including its children
+    ->dropElement('div')
+
+    // Allow the attribute "title" on the "div" element
+    ->allowAttribute('title', ['div'])
+
+    // Allow the attribute "data-custom-attr" on all currently allowed elements
+    ->allowAttribute('data-custom-attr', '*')
+
+    // Drop the "data-custom-attr" attribute from the "div" element:
+    // this attribute will be removed
+    ->dropAttribute('data-custom-attr', ['div'])
+
+    // Drop the "data-custom-attr" attribute from all elements:
+    // this attribute will be removed
+    ->dropAttribute('data-custom-attr', '*')
+
+    // Forcefully set the value of all "rel" attributes on "a"
+    // elements to "noopener noreferrer"
+    ->forceAttribute('a', 'rel', 'noopener noreferrer')
+
+    // Transform all HTTP schemes to HTTPS
+    ->forceHttpsUrls()
+
+    // Configure which schemes are allowed in links (others will be dropped)
+    ->allowLinkSchemes(['https', 'http', 'mailto'])
+
+    // Configure which hosts are allowed in links (by default all are allowed)
+    ->allowLinkHosts(['symfony.com', 'example.com'])
+
+    // Allow relative URL in links (by default they are dropped)
+    ->allowRelativeLinks()
+
+    // Configure which schemes are allowed in img/audio/video/iframe (others will be dropped)
+    ->allowMediaSchemes(['https', 'http'])
+
+    // Configure which hosts are allowed in img/audio/video/iframe (by default all are allowed)
+    ->allowMediaHosts(['symfony.com', 'example.com'])
+
+    // Allow relative URL in img/audio/video/iframe (by default they are dropped)
+    ->allowRelativeMedias()
+
+    // Configure a custom attribute sanitizer to apply custom sanitization logic
+    // ($attributeSanitizer instance of AttributeSanitizerInterface)
+    ->withAttributeSanitizer($attributeSanitizer)
+
+    // Unregister a previously registered attribute sanitizer
+    // ($attributeSanitizer instance of AttributeSanitizerInterface)
+    ->withoutAttributeSanitizer($attributeSanitizer)
+;
+
+$sanitizer = new HtmlSanitizer($config);
+
+// Sanitize a given string, using the configuration provided and in the
+// "body" context (tags only allowed in <head> will be removed)
+$sanitizer->sanitize($userInput);
+
+// Sanitize the given string for a usage in a <head> tag
+$sanitizer->sanitizeFor('head', $userInput);
+
+// Sanitize the given string for a usage in another tag
+$sanitizer->sanitizeFor('title', $userInput); // Will encode as HTML entities
+$sanitizer->sanitizeFor('textarea', $userInput); // Will encode as HTML entities
+$sanitizer->sanitizeFor('div', $userInput); // Will sanitize as body
+$sanitizer->sanitizeFor('section', $userInput); // Will sanitize as body
+// ...
+```
+
+Resources
+---------
+
+ * [Contributing](https://symfony.com/doc/current/contributing/index.html)
+ * [Report issues](https://github.com/symfony/symfony/issues) and
+   [send Pull Requests](https://github.com/symfony/symfony/pulls)
+   in the [main Symfony repository](https://github.com/symfony/symfony)
diff --git a/app/vendor/symfony/html-sanitizer/Reference/W3CReference.php b/app/vendor/symfony/html-sanitizer/Reference/W3CReference.php
new file mode 100644
index 000000000..e519f76a4
--- /dev/null
+++ b/app/vendor/symfony/html-sanitizer/Reference/W3CReference.php
@@ -0,0 +1,400 @@
+<?php
+
+/*
+ * This file is part of the Symfony package.
+ *
+ * (c) Fabien Potencier <fabien@symfony.com>
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace Symfony\Component\HtmlSanitizer\Reference;
+
+/**
+ * Stores reference data from the W3C Sanitizer API standard.
+ *
+ * @see https://wicg.github.io/sanitizer-api/#default-configuration
+ *
+ * @author Titouan Galopin <galopintitouan@gmail.com>
+ *
+ * @internal
+ */
+final class W3CReference
+{
+    /**
+     * Sanitizer supported contexts.
+     *
+     * A parent element name can be passed as an argument to {@see HtmlSanitizer::sanitizeFor()}.
+     * When doing so, depending on the given context, different elements will be allowed.
+     */
+    public const CONTEXT_HEAD = 'head';
+    public const CONTEXT_BODY = 'body';
+    public const CONTEXT_TEXT = 'text';
+
+    // Which context to apply depending on the passed parent element name
+    public const CONTEXTS_MAP = [
+        'head' => self::CONTEXT_HEAD,
+        'textarea' => self::CONTEXT_TEXT,
+        'title' => self::CONTEXT_TEXT,
+    ];
+
+    /**
+     * Elements allowed by the Sanitizer standard in <head> as keys, including whether
+     * they are safe or not as values (safe meaning no global display/audio/video impact).
+     */
+    public const HEAD_ELEMENTS = [
+        'head' => true,
+        'link' => true,
+        'meta' => true,
+        'style' => false,
+        'title' => true,
+    ];
+
+    /**
+     * Elements allowed by the Sanitizer standard in <body> as keys, including whether
+     * they are safe or not as values (safe meaning no global display/audio/video impact).
+     */
+    public const BODY_ELEMENTS = [
+        'a' => true,
+        'abbr' => true,
+        'acronym' => true,
+        'address' => true,
+        'area' => true,
+        'article' => true,
+        'aside' => true,
+        'audio' => true,
+        'b' => true,
+        'basefont' => true,
+        'bdi' => true,
+        'bdo' => true,
+        'bgsound' => false,
+        'big' => true,
+        'blockquote' => true,
+        'body' => true,
+        'br' => true,
+        'button' => true,
+        'canvas' => true,
+        'caption' => true,
+        'center' => true,
+        'cite' => true,
+        'code' => true,
+        'col' => true,
+        'colgroup' => true,
+        'command' => true,
+        'data' => true,
+        'datalist' => true,
+        'dd' => true,
+        'del' => true,
+        'details' => true,
+        'dfn' => true,
+        'dialog' => true,
+        'dir' => true,
+        'div' => true,
+        'dl' => true,
+        'dt' => true,
+        'em' => true,
+        'fieldset' => true,
+        'figcaption' => true,
+        'figure' => true,
+        'font' => true,
+        'footer' => true,
+        'form' => false,
+        'h1' => true,
+        'h2' => true,
+        'h3' => true,
+        'h4' => true,
+        'h5' => true,
+        'h6' => true,
+        'header' => true,
+        'hgroup' => true,
+        'hr' => true,
+        'html' => true,
+        'i' => true,
+        'image' => true,
+        'img' => true,
+        'input' => false,
+        'ins' => true,
+        'kbd' => true,
+        'keygen' => true,
+        'label' => true,
+        'layer' => true,
+        'legend' => true,
+        'li' => true,
+        'listing' => true,
+        'main' => true,
+        'map' => true,
+        'mark' => true,
+        'marquee' => true,
+        'menu' => true,
+        'meter' => true,
+        'nav' => true,
+        'nobr' => true,
+        'ol' => true,
+        'optgroup' => true,
+        'option' => true,
+        'output' => true,
+        'p' => true,
+        'picture' => true,
+        'plaintext' => true,
+        'popup' => true,
+        'portal' => true,
+        'pre' => true,
+        'progress' => true,
+        'q' => true,
+        'rb' => true,
+        'rp' => true,
+        'rt' => true,
+        'rtc' => true,
+        'ruby' => true,
+        's' => true,
+        'samp' => true,
+        'section' => true,
+        'select' => false,
+        'selectmenu' => false,
+        'slot' => true,
+        'small' => true,
+        'source' => true,
+        'span' => true,
+        'strike' => true,
+        'strong' => true,
+        'sub' => true,
+        'summary' => true,
+        'sup' => true,
+        'table' => true,
+        'tbody' => true,
+        'td' => true,
+        'template' => true,
+        'textarea' => false,
+        'tfoot' => true,
+        'th' => true,
+        'thead' => true,
+        'time' => true,
+        'tr' => true,
+        'track' => true,
+        'tt' => true,
+        'u' => true,
+        'ul' => true,
+        'var' => true,
+        'video' => true,
+        'wbr' => true,
+        'xmp' => true,
+    ];
+
+    /**
+     * Attributes allowed by the standard.
+     */
+    public const ATTRIBUTES = [
+        'abbr' => true,
+        'accept' => true,
+        'accept-charset' => true,
+        'accesskey' => true,
+        'action' => true,
+        'align' => true,
+        'alink' => true,
+        'allow' => true,
+        'allowfullscreen' => true,
+        'allowpaymentrequest' => false,
+        'alt' => true,
+        'anchor' => true,
+        'archive' => true,
+        'as' => true,
+        'async' => false,
+        'autocapitalize' => false,
+        'autocomplete' => false,
+        'autocorrect' => false,
+        'autofocus' => false,
+        'autopictureinpicture' => false,
+        'autoplay' => false,
+        'axis' => true,
+        'background' => false,
+        'behavior' => true,
+        'bgcolor' => false,
+        'border' => false,
+        'bordercolor' => false,
+        'capture' => true,
+        'cellpadding' => true,
+        'cellspacing' => true,
+        'challenge' => true,
+        'char' => true,
+        'charoff' => true,
+        'charset' => true,
+        'checked' => false,
+        'cite' => true,
+        'class' => false,
+        'classid' => false,
+        'clear' => true,
+        'code' => true,
+        'codebase' => true,
+        'codetype' => true,
+        'color' => false,
+        'cols' => true,
+        'colspan' => true,
+        'compact' => true,
+        'content' => true,
+        'contenteditable' => false,
+        'controls' => true,
+        'controlslist' => true,
+        'conversiondestination' => true,
+        'coords' => true,
+        'crossorigin' => true,
+        'csp' => true,
+        'data' => true,
+        'datetime' => true,
+        'declare' => true,
+        'decoding' => true,
+        'default' => true,
+        'defer' => true,
+        'dir' => true,
+        'direction' => true,
+        'dirname' => true,
+        'disabled' => true,
+        'disablepictureinpicture' => true,
+        'disableremoteplayback' => true,
+        'disallowdocumentaccess' => true,
+        'download' => true,
+        'draggable' => true,
+        'elementtiming' => true,
+        'enctype' => true,
+        'end' => true,
+        'enterkeyhint' => true,
+        'event' => true,
+        'exportparts' => true,
+        'face' => true,
+        'for' => true,
+        'form' => false,
+        'formaction' => false,
+        'formenctype' => false,
+        'formmethod' => false,
+        'formnovalidate' => false,
+        'formtarget' => false,
+        'frame' => false,
+        'frameborder' => false,
+        'headers' => true,
+        'height' => true,
+        'hidden' => false,
+        'high' => true,
+        'href' => true,
+        'hreflang' => true,
+        'hreftranslate' => true,
+        'hspace' => true,
+        'http-equiv' => false,
+        'id' => true,
+        'imagesizes' => true,
+        'imagesrcset' => true,
+        'importance' => true,
+        'impressiondata' => true,
+        'impressionexpiry' => true,
+        'incremental' => true,
+        'inert' => true,
+        'inputmode' => true,
+        'integrity' => true,
+        'invisible' => true,
+        'is' => true,
+        'ismap' => true,
+        'keytype' => true,
+        'kind' => true,
+        'label' => true,
+        'lang' => true,
+        'language' => true,
+        'latencyhint' => true,
+        'leftmargin' => true,
+        'link' => true,
+        'list' => true,
+        'loading' => true,
+        'longdesc' => true,
+        'loop' => true,
+        'low' => true,
+        'lowsrc' => true,
+        'manifest' => true,
+        'marginheight' => true,
+        'marginwidth' => true,
+        'max' => true,
+        'maxlength' => true,
+        'mayscript' => true,
+        'media' => true,
+        'method' => true,
+        'min' => true,
+        'minlength' => true,
+        'multiple' => true,
+        'muted' => true,
+        'name' => true,
+        'nohref' => true,
+        'nomodule' => true,
+        'nonce' => true,
+        'noresize' => true,
+        'noshade' => true,
+        'novalidate' => true,
+        'nowrap' => true,
+        'object' => true,
+        'open' => true,
+        'optimum' => true,
+        'part' => true,
+        'pattern' => true,
+        'ping' => false,
+        'placeholder' => true,
+        'playsinline' => true,
+        'policy' => true,
+        'poster' => true,
+        'preload' => true,
+        'pseudo' => true,
+        'readonly' => true,
+        'referrerpolicy' => true,
+        'rel' => true,
+        'reportingorigin' => true,
+        'required' => true,
+        'resources' => true,
+        'rev' => true,
+        'reversed' => true,
+        'role' => true,
+        'rows' => true,
+        'rowspan' => true,
+        'rules' => true,
+        'sandbox' => true,
+        'scheme' => true,
+        'scope' => true,
+        'scopes' => true,
+        'scrollamount' => true,
+        'scrolldelay' => true,
+        'scrolling' => true,
+        'select' => false,
+        'selected' => false,
+        'shadowroot' => true,
+        'shadowrootdelegatesfocus' => true,
+        'shape' => true,
+        'size' => true,
+        'sizes' => true,
+        'slot' => true,
+        'span' => true,
+        'spellcheck' => true,
+        'src' => true,
+        'srcdoc' => true,
+        'srclang' => true,
+        'srcset' => true,
+        'standby' => true,
+        'start' => true,
+        'step' => true,
+        'style' => false,
+        'summary' => true,
+        'tabindex' => true,
+        'target' => true,
+        'text' => true,
+        'title' => true,
+        'topmargin' => true,
+        'translate' => true,
+        'truespeed' => true,
+        'trusttoken' => true,
+        'type' => true,
+        'usemap' => true,
+        'valign' => true,
+        'value' => false,
+        'valuetype' => true,
+        'version' => true,
+        'virtualkeyboardpolicy' => true,
+        'vlink' => false,
+        'vspace' => true,
+        'webkitdirectory' => true,
+        'width' => true,
+        'wrap' => true,
+    ];
+}
diff --git a/app/vendor/symfony/html-sanitizer/TextSanitizer/StringSanitizer.php b/app/vendor/symfony/html-sanitizer/TextSanitizer/StringSanitizer.php
new file mode 100644
index 000000000..99c564697
--- /dev/null
+++ b/app/vendor/symfony/html-sanitizer/TextSanitizer/StringSanitizer.php
@@ -0,0 +1,82 @@
+<?php
+
+/*
+ * This file is part of the Symfony package.
+ *
+ * (c) Fabien Potencier <fabien@symfony.com>
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace Symfony\Component\HtmlSanitizer\TextSanitizer;
+
+/**
+ * @internal
+ */
+final class StringSanitizer
+{
+    private const LOWERCASE = [
+        'ABCDEFGHIJKLMNOPQRSTUVWXYZ',
+        'abcdefghijklmnopqrstuvwxyz',
+    ];
+
+    private const REPLACEMENTS = [
+        [
+            // "&#34;" is shorter than "&quot;"
+            '&quot;',
+
+            // Fix several potential issues in how browsers interpret attributes values
+            '+',
+            '=',
+            '@',
+            '`',
+
+            // Some DB engines will transform UTF8 full-width characters their classical version
+            // if the data is saved in a non-UTF8 field
+            '＜',
+            '＞',
+            '＋',
+            '＝',
+            '＠',
+            '｀',
+        ],
+        [
+            '&#34;',
+
+            '&#43;',
+            '&#61;',
+            '&#64;',
+            '&#96;',
+
+            '&#xFF1C;',
+            '&#xFF1E;',
+            '&#xFF0B;',
+            '&#xFF1D;',
+            '&#xFF20;',
+            '&#xFF40;',
+        ],
+    ];
+
+    /**
+     * Applies a transformation to lowercase following W3C HTML Standard.
+     *
+     * @see https://w3c.github.io/html-reference/terminology.html#case-insensitive
+     */
+    public static function htmlLower(string $string): string
+    {
+        return strtr($string, self::LOWERCASE[0], self::LOWERCASE[1]);
+    }
+
+    /**
+     * Encodes the HTML entities in the given string for safe injection in a document's DOM.
+     */
+    public static function encodeHtmlEntities(string $string): string
+    {
+        return str_replace(
+            self::REPLACEMENTS[0],
+            self::REPLACEMENTS[1],
+            htmlspecialchars($string, \ENT_QUOTES | \ENT_SUBSTITUTE, 'UTF-8')
+        );
+    }
+}
diff --git a/app/vendor/symfony/html-sanitizer/TextSanitizer/UrlSanitizer.php b/app/vendor/symfony/html-sanitizer/TextSanitizer/UrlSanitizer.php
new file mode 100644
index 000000000..05d86ba15
--- /dev/null
+++ b/app/vendor/symfony/html-sanitizer/TextSanitizer/UrlSanitizer.php
@@ -0,0 +1,142 @@
+<?php
+
+/*
+ * This file is part of the Symfony package.
+ *
+ * (c) Fabien Potencier <fabien@symfony.com>
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace Symfony\Component\HtmlSanitizer\TextSanitizer;
+
+use League\Uri\Exceptions\SyntaxError;
+use League\Uri\UriString;
+
+/**
+ * @internal
+ */
+final class UrlSanitizer
+{
+    /**
+     * Sanitizes a given URL string.
+     *
+     * In addition to ensuring $input is a valid URL, this sanitizer checks that:
+     *   * the URL's host is allowed ;
+     *   * the URL's scheme is allowed ;
+     *   * the URL is allowed to be relative if it is ;
+     *
+     * It also transforms the URL to HTTPS if requested.
+     */
+    public static function sanitize(?string $input, ?array $allowedSchemes = null, bool $forceHttps = false, ?array $allowedHosts = null, bool $allowRelative = false): ?string
+    {
+        if (!$input) {
+            return null;
+        }
+
+        $url = self::parse($input);
+
+        // Malformed URL
+        if (!$url || !\is_array($url)) {
+            return null;
+        }
+
+        // No scheme and relative not allowed
+        if (!$allowRelative && !$url['scheme']) {
+            return null;
+        }
+
+        // Forbidden scheme
+        if ($url['scheme'] && null !== $allowedSchemes && !\in_array($url['scheme'], $allowedSchemes, true)) {
+            return null;
+        }
+
+        // If the scheme used is not supposed to have a host, do not check the host
+        if (!self::isHostlessScheme($url['scheme'])) {
+            // No host and relative not allowed
+            if (!$allowRelative && !$url['host']) {
+                return null;
+            }
+
+            // Forbidden host
+            if ($url['host'] && null !== $allowedHosts && !self::isAllowedHost($url['host'], $allowedHosts)) {
+                return null;
+            }
+        }
+
+        // Force HTTPS
+        if ($forceHttps && 'http' === $url['scheme']) {
+            $url['scheme'] = 'https';
+        }
+
+        return UriString::build($url);
+    }
+
+    /**
+     * Parses a given URL and returns an array of its components.
+     *
+     * @return null|array{
+     *     scheme:?string,
+     *     user:?string,
+     *     pass:?string,
+     *     host:?string,
+     *     port:?int,
+     *     path:string,
+     *     query:?string,
+     *     fragment:?string
+     * }
+     */
+    public static function parse(string $url): ?array
+    {
+        if (!$url) {
+            return null;
+        }
+
+        try {
+            $parsedUrl = UriString::parse($url);
+
+            if (preg_match('/\s/', $url)) {
+                return null;
+            }
+
+            return $parsedUrl;
+        } catch (SyntaxError) {
+            return null;
+        }
+    }
+
+    private static function isHostlessScheme(?string $scheme): bool
+    {
+        return \in_array($scheme, ['blob', 'chrome', 'data', 'file', 'geo', 'mailto', 'maps', 'tel', 'view-source'], true);
+    }
+
+    private static function isAllowedHost(?string $host, array $allowedHosts): bool
+    {
+        if (null === $host) {
+            return \in_array(null, $allowedHosts, true);
+        }
+
+        $parts = array_reverse(explode('.', $host));
+
+        foreach ($allowedHosts as $allowedHost) {
+            if (self::matchAllowedHostParts($parts, array_reverse(explode('.', $allowedHost)))) {
+                return true;
+            }
+        }
+
+        return false;
+    }
+
+    private static function matchAllowedHostParts(array $uriParts, array $trustedParts): bool
+    {
+        // Check each chunk of the domain is valid
+        foreach ($trustedParts as $key => $trustedPart) {
+            if ($uriParts[$key] !== $trustedPart) {
+                return false;
+            }
+        }
+
+        return true;
+    }
+}
diff --git a/app/vendor/symfony/html-sanitizer/Visitor/AttributeSanitizer/AttributeSanitizerInterface.php b/app/vendor/symfony/html-sanitizer/Visitor/AttributeSanitizer/AttributeSanitizerInterface.php
new file mode 100644
index 000000000..92e983e87
--- /dev/null
+++ b/app/vendor/symfony/html-sanitizer/Visitor/AttributeSanitizer/AttributeSanitizerInterface.php
@@ -0,0 +1,41 @@
+<?php
+
+/*
+ * This file is part of the Symfony package.
+ *
+ * (c) Fabien Potencier <fabien@symfony.com>
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace Symfony\Component\HtmlSanitizer\Visitor\AttributeSanitizer;
+
+use Symfony\Component\HtmlSanitizer\HtmlSanitizerConfig;
+
+/**
+ * Implements attribute-specific sanitization logic.
+ *
+ * @author Titouan Galopin <galopintitouan@gmail.com>
+ */
+interface AttributeSanitizerInterface
+{
+    /**
+     * Returns the list of element names supported, or null to support all elements.
+     *
+     * @return list<string>|null
+     */
+    public function getSupportedElements(): ?array;
+
+    /**
+     * Returns the list of attributes names supported, or null to support all attributes.
+     *
+     * @return list<string>|null
+     */
+    public function getSupportedAttributes(): ?array;
+
+    /**
+     * Returns the sanitized value of a given attribute for the given element.
+     */
+    public function sanitizeAttribute(string $element, string $attribute, string $value, HtmlSanitizerConfig $config): ?string;
+}
diff --git a/app/vendor/symfony/html-sanitizer/Visitor/AttributeSanitizer/UrlAttributeSanitizer.php b/app/vendor/symfony/html-sanitizer/Visitor/AttributeSanitizer/UrlAttributeSanitizer.php
new file mode 100644
index 000000000..a3dbf2f09
--- /dev/null
+++ b/app/vendor/symfony/html-sanitizer/Visitor/AttributeSanitizer/UrlAttributeSanitizer.php
@@ -0,0 +1,53 @@
+<?php
+
+/*
+ * This file is part of the Symfony package.
+ *
+ * (c) Fabien Potencier <fabien@symfony.com>
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace Symfony\Component\HtmlSanitizer\Visitor\AttributeSanitizer;
+
+use Symfony\Component\HtmlSanitizer\HtmlSanitizerConfig;
+use Symfony\Component\HtmlSanitizer\TextSanitizer\UrlSanitizer;
+
+/**
+ * @author Titouan Galopin <galopintitouan@gmail.com>
+ */
+final class UrlAttributeSanitizer implements AttributeSanitizerInterface
+{
+    public function getSupportedElements(): ?array
+    {
+        // Check all elements for URL attributes
+        return null;
+    }
+
+    public function getSupportedAttributes(): ?array
+    {
+        return ['src', 'href', 'lowsrc', 'background', 'ping'];
+    }
+
+    public function sanitizeAttribute(string $element, string $attribute, string $value, HtmlSanitizerConfig $config): ?string
+    {
+        if ('a' === $element) {
+            return UrlSanitizer::sanitize(
+                $value,
+                $config->getAllowedLinkSchemes(),
+                $config->getForceHttpsUrls(),
+                $config->getAllowedLinkHosts(),
+                $config->getAllowRelativeLinks(),
+            );
+        }
+
+        return UrlSanitizer::sanitize(
+            $value,
+            $config->getAllowedMediaSchemes(),
+            $config->getForceHttpsUrls(),
+            $config->getAllowedMediaHosts(),
+            $config->getAllowRelativeMedias(),
+        );
+    }
+}
diff --git a/app/vendor/symfony/html-sanitizer/Visitor/DomVisitor.php b/app/vendor/symfony/html-sanitizer/Visitor/DomVisitor.php
new file mode 100644
index 000000000..e6d34a096
--- /dev/null
+++ b/app/vendor/symfony/html-sanitizer/Visitor/DomVisitor.php
@@ -0,0 +1,188 @@
+<?php
+
+/*
+ * This file is part of the Symfony package.
+ *
+ * (c) Fabien Potencier <fabien@symfony.com>
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace Symfony\Component\HtmlSanitizer\Visitor;
+
+use Symfony\Component\HtmlSanitizer\HtmlSanitizerAction;
+use Symfony\Component\HtmlSanitizer\HtmlSanitizerConfig;
+use Symfony\Component\HtmlSanitizer\TextSanitizer\StringSanitizer;
+use Symfony\Component\HtmlSanitizer\Visitor\AttributeSanitizer\AttributeSanitizerInterface;
+use Symfony\Component\HtmlSanitizer\Visitor\Model\Cursor;
+use Symfony\Component\HtmlSanitizer\Visitor\Node\BlockedNode;
+use Symfony\Component\HtmlSanitizer\Visitor\Node\DocumentNode;
+use Symfony\Component\HtmlSanitizer\Visitor\Node\Node;
+use Symfony\Component\HtmlSanitizer\Visitor\Node\NodeInterface;
+use Symfony\Component\HtmlSanitizer\Visitor\Node\TextNode;
+
+/**
+ * Iterates over the parsed DOM tree to build the sanitized tree.
+ *
+ * The DomVisitor iterates over the parsed DOM tree, visits its nodes and build
+ * a sanitized tree with their attributes and content.
+ *
+ * @author Titouan Galopin <galopintitouan@gmail.com>
+ *
+ * @internal
+ */
+final class DomVisitor
+{
+    private HtmlSanitizerAction $defaultAction = HtmlSanitizerAction::Drop;
+
+    /**
+     * Registry of attributes to forcefully set on nodes, index by element and attribute.
+     *
+     * @var array<string, array<string, string>>
+     */
+    private array $forcedAttributes;
+
+    /**
+     * Registry of attributes sanitizers indexed by element name and attribute name for
+     * faster sanitization.
+     *
+     * @var array<string, array<string, list<AttributeSanitizerInterface>>>
+     */
+    private array $attributeSanitizers = [];
+
+    /**
+     * @param array<string, HtmlSanitizerAction|array<string, bool>> $elementsConfig Registry of allowed/blocked elements:
+     *                                                                               * If an element is present as a key and contains an array, the element should be allowed
+     *                                                                               and the array is the list of allowed attributes.
+     *                                                                               * If an element is present as a key and contains an HtmlSanitizerAction, that action applies.
+     *                                                                               * If an element is not present as a key, the default action applies.
+     */
+    public function __construct(
+        private HtmlSanitizerConfig $config,
+        private array $elementsConfig,
+    ) {
+        $this->forcedAttributes = $config->getForcedAttributes();
+
+        foreach ($config->getAttributeSanitizers() as $attributeSanitizer) {
+            foreach ($attributeSanitizer->getSupportedElements() ?? ['*'] as $element) {
+                foreach ($attributeSanitizer->getSupportedAttributes() ?? ['*'] as $attribute) {
+                    $this->attributeSanitizers[$element][$attribute][] = $attributeSanitizer;
+                }
+            }
+        }
+
+        $this->defaultAction = $config->getDefaultAction();
+    }
+
+    public function visit(\DOMDocumentFragment $domNode): ?NodeInterface
+    {
+        $cursor = new Cursor(new DocumentNode());
+        $this->visitChildren($domNode, $cursor);
+
+        return $cursor->node;
+    }
+
+    private function visitNode(\DOMNode $domNode, Cursor $cursor): void
+    {
+        $nodeName = StringSanitizer::htmlLower($domNode->nodeName);
+
+        // Visit recursively if the node was not dropped
+        if ($this->enterNode($nodeName, $domNode, $cursor)) {
+            $this->visitChildren($domNode, $cursor);
+            $cursor->node = $cursor->node->getParent();
+        }
+    }
+
+    private function enterNode(string $domNodeName, \DOMNode $domNode, Cursor $cursor): bool
+    {
+        if (!\array_key_exists($domNodeName, $this->elementsConfig)) {
+            $action = $this->defaultAction;
+            $allowedAttributes = [];
+        } else {
+            if (\is_array($this->elementsConfig[$domNodeName])) {
+                $action = HtmlSanitizerAction::Allow;
+                $allowedAttributes = $this->elementsConfig[$domNodeName];
+            } else {
+                $action = $this->elementsConfig[$domNodeName];
+                $allowedAttributes = [];
+            }
+        }
+
+        if (HtmlSanitizerAction::Drop === $action) {
+            return false;
+        }
+
+        // Element should be blocked, retaining its children
+        if (HtmlSanitizerAction::Block === $action) {
+            $node = new BlockedNode($cursor->node);
+
+            $cursor->node->addChild($node);
+            $cursor->node = $node;
+
+            return true;
+        }
+
+        // Otherwise create the node
+        $node = new Node($cursor->node, $domNodeName);
+        $this->setAttributes($domNodeName, $domNode, $node, $allowedAttributes);
+
+        // Force configured attributes
+        foreach ($this->forcedAttributes[$domNodeName] ?? [] as $attribute => $value) {
+            $node->setAttribute($attribute, $value);
+        }
+
+        $cursor->node->addChild($node);
+        $cursor->node = $node;
+
+        return true;
+    }
+
+    private function visitChildren(\DOMNode $domNode, Cursor $cursor): void
+    {
+        /** @var \DOMNode $child */
+        foreach ($domNode->childNodes ?? [] as $child) {
+            if ('#text' === $child->nodeName) {
+                // Add text directly for performance
+                $cursor->node->addChild(new TextNode($cursor->node, $child->nodeValue));
+            } elseif (!$child instanceof \DOMText && !$child instanceof \DOMProcessingInstruction) {
+                // Otherwise continue the visit recursively
+                // Ignore comments for security reasons (interpreted differently by browsers)
+                // Ignore processing instructions (treated as comments)
+                $this->visitNode($child, $cursor);
+            }
+        }
+    }
+
+    /**
+     * Set attributes from a DOM node to a sanitized node.
+     */
+    private function setAttributes(string $domNodeName, \DOMNode $domNode, Node $node, array $allowedAttributes = []): void
+    {
+        /** @var iterable<\DOMAttr> $domAttributes */
+        if (!$domAttributes = $domNode->attributes ? $domNode->attributes->getIterator() : []) {
+            return;
+        }
+
+        foreach ($domAttributes as $attribute) {
+            $name = StringSanitizer::htmlLower($attribute->name);
+
+            if (isset($allowedAttributes[$name])) {
+                $value = $attribute->value;
+
+                // Sanitize the attribute value if there are attribute sanitizers for it
+                $attributeSanitizers = array_merge(
+                    $this->attributeSanitizers[$domNodeName][$name] ?? [],
+                    $this->attributeSanitizers['*'][$name] ?? [],
+                    $this->attributeSanitizers[$domNodeName]['*'] ?? [],
+                );
+
+                foreach ($attributeSanitizers as $sanitizer) {
+                    $value = $sanitizer->sanitizeAttribute($domNodeName, $name, $value, $this->config);
+                }
+
+                $node->setAttribute($name, $value);
+            }
+        }
+    }
+}
diff --git a/app/vendor/symfony/html-sanitizer/Visitor/Model/Cursor.php b/app/vendor/symfony/html-sanitizer/Visitor/Model/Cursor.php
new file mode 100644
index 000000000..5214c09b7
--- /dev/null
+++ b/app/vendor/symfony/html-sanitizer/Visitor/Model/Cursor.php
@@ -0,0 +1,26 @@
+<?php
+
+/*
+ * This file is part of the Symfony package.
+ *
+ * (c) Fabien Potencier <fabien@symfony.com>
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace Symfony\Component\HtmlSanitizer\Visitor\Model;
+
+use Symfony\Component\HtmlSanitizer\Visitor\Node\NodeInterface;
+
+/**
+ * @author Titouan Galopin <galopintitouan@gmail.com>
+ *
+ * @internal
+ */
+final class Cursor
+{
+    public function __construct(public ?NodeInterface $node)
+    {
+    }
+}
diff --git a/app/vendor/symfony/html-sanitizer/Visitor/Node/BlockedNode.php b/app/vendor/symfony/html-sanitizer/Visitor/Node/BlockedNode.php
new file mode 100644
index 000000000..fc5e03e63
--- /dev/null
+++ b/app/vendor/symfony/html-sanitizer/Visitor/Node/BlockedNode.php
@@ -0,0 +1,45 @@
+<?php
+
+/*
+ * This file is part of the Symfony package.
+ *
+ * (c) Fabien Potencier <fabien@symfony.com>
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace Symfony\Component\HtmlSanitizer\Visitor\Node;
+
+/**
+ * @author Titouan Galopin <galopintitouan@gmail.com>
+ */
+final class BlockedNode implements NodeInterface
+{
+    private array $children = [];
+
+    public function __construct(
+        private NodeInterface $parentNode,
+    ) {
+    }
+
+    public function addChild(NodeInterface $node): void
+    {
+        $this->children[] = $node;
+    }
+
+    public function getParent(): ?NodeInterface
+    {
+        return $this->parentNode;
+    }
+
+    public function render(): string
+    {
+        $rendered = '';
+        foreach ($this->children as $child) {
+            $rendered .= $child->render();
+        }
+
+        return $rendered;
+    }
+}
diff --git a/app/vendor/symfony/html-sanitizer/Visitor/Node/DocumentNode.php b/app/vendor/symfony/html-sanitizer/Visitor/Node/DocumentNode.php
new file mode 100644
index 000000000..17037f84d
--- /dev/null
+++ b/app/vendor/symfony/html-sanitizer/Visitor/Node/DocumentNode.php
@@ -0,0 +1,40 @@
+<?php
+
+/*
+ * This file is part of the Symfony package.
+ *
+ * (c) Fabien Potencier <fabien@symfony.com>
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace Symfony\Component\HtmlSanitizer\Visitor\Node;
+
+/**
+ * @author Titouan Galopin <galopintitouan@gmail.com>
+ */
+final class DocumentNode implements NodeInterface
+{
+    private array $children = [];
+
+    public function addChild(NodeInterface $node): void
+    {
+        $this->children[] = $node;
+    }
+
+    public function getParent(): ?NodeInterface
+    {
+        return null;
+    }
+
+    public function render(): string
+    {
+        $rendered = '';
+        foreach ($this->children as $child) {
+            $rendered .= $child->render();
+        }
+
+        return $rendered;
+    }
+}
diff --git a/app/vendor/symfony/html-sanitizer/Visitor/Node/Node.php b/app/vendor/symfony/html-sanitizer/Visitor/Node/Node.php
new file mode 100644
index 000000000..d25803776
--- /dev/null
+++ b/app/vendor/symfony/html-sanitizer/Visitor/Node/Node.php
@@ -0,0 +1,121 @@
+<?php
+
+/*
+ * This file is part of the Symfony package.
+ *
+ * (c) Fabien Potencier <fabien@symfony.com>
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace Symfony\Component\HtmlSanitizer\Visitor\Node;
+
+use Symfony\Component\HtmlSanitizer\TextSanitizer\StringSanitizer;
+
+/**
+ * @author Titouan Galopin <galopintitouan@gmail.com>
+ */
+final class Node implements NodeInterface
+{
+    // HTML5 elements which are self-closing
+    private const VOID_ELEMENTS = [
+        'area' => true,
+        'base' => true,
+        'br' => true,
+        'col' => true,
+        'embed' => true,
+        'hr' => true,
+        'img' => true,
+        'input' => true,
+        'keygen' => true,
+        'link' => true,
+        'meta' => true,
+        'param' => true,
+        'source' => true,
+        'track' => true,
+        'wbr' => true,
+    ];
+
+    private array $attributes = [];
+    private array $children = [];
+
+    public function __construct(
+        private NodeInterface $parent,
+        private string $tagName,
+    ) {
+    }
+
+    public function getParent(): ?NodeInterface
+    {
+        return $this->parent;
+    }
+
+    public function getAttribute(string $name): ?string
+    {
+        return $this->attributes[$name] ?? null;
+    }
+
+    public function setAttribute(string $name, ?string $value): void
+    {
+        // Always use only the first declaration (ease sanitization)
+        if (!\array_key_exists($name, $this->attributes)) {
+            $this->attributes[$name] = $value;
+        }
+    }
+
+    public function addChild(NodeInterface $node): void
+    {
+        $this->children[] = $node;
+    }
+
+    public function render(): string
+    {
+        if (isset(self::VOID_ELEMENTS[$this->tagName])) {
+            return '<'.$this->tagName.$this->renderAttributes().' />';
+        }
+
+        $rendered = '<'.$this->tagName.$this->renderAttributes().'>';
+        foreach ($this->children as $child) {
+            $rendered .= $child->render();
+        }
+
+        return $rendered.'</'.$this->tagName.'>';
+    }
+
+    private function renderAttributes(): string
+    {
+        $rendered = [];
+        foreach ($this->attributes as $name => $value) {
+            if (null === $value) {
+                // Tag should be removed as a sanitizer found suspect data inside
+                continue;
+            }
+
+            $attr = StringSanitizer::encodeHtmlEntities($name);
+
+            if ('' !== $value) {
+                // In quirks mode, IE8 does a poor job producing innerHTML values.
+                // If JavaScript does:
+                //      nodeA.innerHTML = nodeB.innerHTML;
+                // and nodeB contains (or even if ` was encoded properly):
+                //      <div attr="``foo=bar">
+                // then IE8 will produce:
+                //      <div attr=``foo=bar>
+                // as the value of nodeB.innerHTML and assign it to nodeA.
+                // IE8's HTML parser treats `` as a blank attribute value and foo=bar becomes a separate attribute.
+                // Adding a space at the end of the attribute prevents this by forcing IE8 to put double
+                // quotes around the attribute when computing nodeB.innerHTML.
+                if (str_contains($value, '`')) {
+                    $value .= ' ';
+                }
+
+                $attr .= '="'.StringSanitizer::encodeHtmlEntities($value).'"';
+            }
+
+            $rendered[] = $attr;
+        }
+
+        return $rendered ? ' '.implode(' ', $rendered) : '';
+    }
+}
diff --git a/app/vendor/symfony/html-sanitizer/Visitor/Node/NodeInterface.php b/app/vendor/symfony/html-sanitizer/Visitor/Node/NodeInterface.php
new file mode 100644
index 000000000..53c69c087
--- /dev/null
+++ b/app/vendor/symfony/html-sanitizer/Visitor/Node/NodeInterface.php
@@ -0,0 +1,37 @@
+<?php
+
+/*
+ * This file is part of the Symfony package.
+ *
+ * (c) Fabien Potencier <fabien@symfony.com>
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace Symfony\Component\HtmlSanitizer\Visitor\Node;
+
+/**
+ * Represents the sanitized version of a DOM node in the sanitized tree.
+ *
+ * Once the sanitization is done, nodes are rendered into the final output string.
+ *
+ * @author Titouan Galopin <galopintitouan@gmail.com>
+ */
+interface NodeInterface
+{
+    /**
+     * Add a child node to this node.
+     */
+    public function addChild(self $node): void;
+
+    /**
+     * Return the parent node of this node, or null if it has no parent node.
+     */
+    public function getParent(): ?self;
+
+    /**
+     * Render this node as a string, recursively rendering its children as well.
+     */
+    public function render(): string;
+}
diff --git a/app/vendor/symfony/html-sanitizer/Visitor/Node/TextNode.php b/app/vendor/symfony/html-sanitizer/Visitor/Node/TextNode.php
new file mode 100644
index 000000000..d4378adc1
--- /dev/null
+++ b/app/vendor/symfony/html-sanitizer/Visitor/Node/TextNode.php
@@ -0,0 +1,39 @@
+<?php
+
+/*
+ * This file is part of the Symfony package.
+ *
+ * (c) Fabien Potencier <fabien@symfony.com>
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace Symfony\Component\HtmlSanitizer\Visitor\Node;
+
+use Symfony\Component\HtmlSanitizer\TextSanitizer\StringSanitizer;
+
+/**
+ * @author Titouan Galopin <galopintitouan@gmail.com>
+ */
+final class TextNode implements NodeInterface
+{
+    public function __construct(private NodeInterface $parentNode, private string $text)
+    {
+    }
+
+    public function addChild(NodeInterface $node): void
+    {
+        throw new \LogicException('Text nodes cannot have children.');
+    }
+
+    public function getParent(): ?NodeInterface
+    {
+        return $this->parentNode;
+    }
+
+    public function render(): string
+    {
+        return StringSanitizer::encodeHtmlEntities($this->text);
+    }
+}
diff --git a/app/vendor/symfony/html-sanitizer/composer.json b/app/vendor/symfony/html-sanitizer/composer.json
new file mode 100644
index 000000000..25de651c1
--- /dev/null
+++ b/app/vendor/symfony/html-sanitizer/composer.json
@@ -0,0 +1,31 @@
+{
+    "name": "symfony/html-sanitizer",
+    "type": "library",
+    "description": "Provides an object-oriented API to sanitize untrusted HTML input for safe insertion into a document's DOM.",
+    "keywords": ["html", "sanitizer", "purifier"],
+    "homepage": "https://symfony.com",
+    "license": "MIT",
+    "authors": [
+        {
+            "name": "Titouan Galopin",
+            "email": "galopintitouan@gmail.com"
+        },
+        {
+            "name": "Symfony Community",
+            "homepage": "https://symfony.com/contributors"
+        }
+    ],
+    "require": {
+        "php": ">=8.2",
+        "ext-dom": "*",
+        "league/uri": "^6.5|^7.0",
+        "masterminds/html5": "^2.7.2"
+    },
+    "autoload": {
+        "psr-4": { "Symfony\\Component\\HtmlSanitizer\\": "" },
+        "exclude-from-classmap": [
+            "/Tests/"
+        ]
+    },
+    "minimum-stability": "dev"
+}