phpbb/customisation-db — pull request #59 by prototech (2012-02-05 14:35:45+00:00)
Title: Convert single quote entities back to character. Bug #62850.

titania_decode_message() converts entities back to their characters before sending the message off to set_var(), which then runs htmlspecialchars(). Since html_entity_decode() ignores single quotes by default, the ampersand in the single quote entity is converted to an entity in set_var. Adding the ENT_QUOTES option to html_entity_decode() fixes this.