PLANET-7630: render special chars when post is shared

[GP-Dan-Tovbein]

Summary

Render just raw the content and prevent XSS atacks.

Please check the reported issue on Slack https://greenpeace.slack.com/archives/C0151L0KKNX/p1770909176985789

After

---

Ref: https://greenpeace-planet4.atlassian.net/browse/PLANET-7630

Testing

1. Create a new post using the title of https://bsky.app/profile/greenpeace.eu/post/3meoaaow4p22t
2. BlueSky account it's required 🙏

[planet-4]

Test instance is ready 🚀

🌑 nix | admin | blocks report | CircleCI | composer-local.json

⌚ 2026.02.24 05:09:06

[GP-Dan-Tovbein]

We might need to replace backticks with ' to avoid XSS atacks.

[sagarsdeshmukh]

Code-wise, the fix looks good to me 👍 However, I would suggest doing UAT with an NRO person who reported the issue, as there may be additional cases involving special characters (such as &) that could still affect social sharing.

[sagarsdeshmukh]

I am checking this page preview on Twitter (I am not aware of any official tool if exist to test this, but for now using the one below) -
https://tweethunter.io/tweetpik/twitter-card-validator

The special characters in the title are breaking social share previews.
The PHPUnit tests need to be check, as they are currently failing.
The special character issue is also commonly reported when using the social share option on the post details page, so it would be good to verify this while working on the ticket.

[GP-Dan-Tovbein]

I am checking this page preview on Twitter (I am not aware of any official tool if exist to test this, but for now using the one below) - https://tweethunter.io/tweetpik/twitter-card-validator

The special characters in the title are breaking social share previews. The PHPUnit tests need to be check, as they are currently failing. The special character issue is also commonly reported when using the social share option on the post details page, so it would be good to verify this while working on the ticket.

I'm getting a different result

While on X.com I get