htmlentities -> htmlspecialchars

web/include/PHPMailer.php

@@ -920,7 +920,7 @@ class PHPMailer
                 break;
             case 'html':
                 //Cleans up output a bit for a better looking, HTML-safe output
-                echo htmlentities(
+                echo htmlspecialchars(
                     preg_replace('/[\r\n]+/', '', $str),
                     ENT_QUOTES,
                     'UTF-8'
@@ -4512,7 +4512,7 @@ class PHPMailer
             return call_user_func($advanced, $html);
         }
 
-        return html_entity_decode(
+        return htmlspecialchars_decode(
             trim(strip_tags(preg_replace('/<(head|title|style|script)[^>]*>.*?<\/\\1>/si', '', $html))),
             ENT_QUOTES,
             $this->CharSet