);

});

it("does not double-decode escaped entities (decodes & last)", () => {

// Graph encodes literally-typed entity text by escaping its '&' to '&'.

// Decoding '&' first would re-decode the now-bare '<'/'>' into

// angle brackets, corrupting the user's literal text.

expect(stripHtmlFromTeamsMessage("The token is <APIKEY>")).toBe(

"The token is <APIKEY>",

);

});

it("normalizes multiple whitespace to single space", () => {

expect(stripHtmlFromTeamsMessage("hello world")).toBe("hello world");

});

let text = html.replace(/<at[^>]*>(.*?)<\/at>/gi, "@$1");

// Strip remaining HTML tags.

text = text.replace(/<[^>]*>/g, " ");

// Decode common HTML entities.

// Decode common HTML entities. &amp; must be decoded LAST to prevent

// double-decoding (e.g. &amp;lt; → &lt; not <), matching decodeHtmlEntities

// in inbound.ts.

text = text

.replace(/&amp;/g, "&")

.replace(/&lt;/g, "<")

.replace(/&gt;/g, ">")

.replace(/&quot;/g, '"')

.replace(/&#39;/g, "'")

.replace(/&nbsp;/g, " ");

.replace(/&nbsp;/g, " ")

.replace(/&amp;/g, "&");

// Normalize whitespace.

return text.replace(/\s+/g, " ").trim();

}