Fix. ContactEncoder. Edits made in the shortcode omitted from encoding

[AntonV1211]

https://app.doboard.com/1/task/49320

[codecov]

Codecov Report

❌ Patch coverage is 92.50000% with 3 lines in your changes missing coverage. Please review.
✅ Project coverage is 26.51%. Comparing base (6b7aa59) to head (10d389f).

Files with missing lines	Patch %	Lines
...ntactsEncoder/Shortcodes/EmailEncoderShortCode.php	91.17%	3 Missing ⚠️

Additional details and impacted files

@@             Coverage Diff              @@
##                dev     #815      +/-   ##
============================================
+ Coverage     26.46%   26.51%   +0.04%     
- Complexity     5667     5676       +9     
============================================
  Files           269      269              
  Lines         24240    24258      +18     
============================================
+ Hits           6416     6432      +16     
- Misses        17824    17826       +2     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[Copilot]

Pull request overview

This PR updates the ContactsEncoder “skip encoding” shortcode handling to reduce XSS risk during shortcode decoding and to avoid processing shortcodes that appear inside HTML tag/attribute contexts.

Changes:

• Sanitizes shortcode callback output (escape decoded value; sanitize fallback HTML).
• Skips changeContentAfterEncoderModify() processing when the shortcode appears inside an HTML tag/attribute context.
• Adds PHPUnit coverage for sanitization behavior and for detecting shortcode offsets inside/outside HTML tags.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 4 comments.

File	Description
lib/Cleantalk/ApbctWP/ContactsEncoder/Shortcodes/ExcludedEncodeContentSC.php	Escapes decoded output, sanitizes fallback output, and adds HTML-tag-context detection to avoid unsafe processing.
tests/ApbctWP/ContactsEncoder/Shortcodes/ExcludedEncodeContentSCTest.php	Adds teardown cleanup plus tests for sanitization and HTML-tag-context detection/skip behavior.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.