Merge branch 'ent-5691-Vulnerabilidad-XSS-en-sistema-de-mensajes' into 'develop'

fix cross-site scripting vulnerability

See merge request artica/pandorafms!3156

pandora_console/operation/messages/message_edit.php

@@ -127,17 +127,7 @@ if ($read_message) {
             ).' '.$user_name;
         }
 
-        $order = [
-            "\r\n",
-            "\n",
-            "\r",
-        ];
-        $replace = '<br />';
-        $parsed_message = str_replace(
-            $order,
-            $replace,
-            trim(io_safe_output($row['message']))
-        );
+        $parsed_message = nl2br(htmlspecialchars(trim(io_safe_output($row['message']))));
 
         echo '<div class="container">';
         echo '  <p>'.$parsed_message.'</p>';