Use DOMPurify to remove mx-reply

src/domain/session/room/timeline/deserialize.js

@@ -345,7 +345,6 @@ class Deserializer {
 }
 
 export function parseHTMLBody(platform, mediaRepository, html) {
-    html = html.replace(/<mx-reply>.+<\/mx-reply>/s, "");
     const parseResult = platform.parseHTML(html);
     const deserializer = new Deserializer(parseResult, mediaRepository);
     const parts = deserializer.parseAnyNodes(parseResult.rootNodes);

src/platform/web/parsehtml.js

@@ -56,7 +56,8 @@ class HTMLParseResult {
 
 const sanitizeConfig = {
     ALLOWED_URI_REGEXP: /^(?:(?:(?:f|ht)tps?|mailto|tel|callto|cid|xmpp|xxx|mxc):|[^a-z]|[a-z+.-]+(?:[^a-z+.-:]|$))/i,
-    ADD_TAGS: ['mx-reply']
+    FORBID_TAGS: ['mx-reply'],
+    KEEP_CONTENT: false,
 }
 
 export function parseHTML(html) {