Email notifications contain HTML tags

#3 patch is successfully applied

The last dev does not correct the problem

I can confirm that this is working on the latest dev version...
Can you please provide more information?

Yes I installed "Private Message Nodejs". The problem is only with the messages sent and received by the administrator.

I changed the text format in the template message but there are still the div tags that appear

I can confirm that I've been experiencing the same issue with what's currently the latest release (8.x-2.0-beta15), and it doesn't seem to matter whether messages are sent from the an admin account or not.

Has anyone found a solution for version 2?

@Jaypan Hi, do you have a patch to fix this tag problem ?
See my 3 screenshots

delete

The problem is corrected for me.

Just do not check the "Respect provided e-mail format." box in the "SwiftMailer" module.

Hello,
same problem for me (html tags on mail object), solved modifying message_notify.module - function message_notify_mail ()
and message_notify\src\Plugin\Notifier\Email.php customizing the function deliver().
if someone needs details, ask

thanks,
bye

@alternativo
can u please give me more details about this solution

Hi Abdelrahman Amer,

this what I did:
message_notify.module:
function message_notify_mail($key, &$message, $params) {
$options = array(
'langcode' => $message['langcode'],
);
switch ($key) {
case 'newmess':
$message['headers'] = $params['headers'];
$message['from'] = \Drupal::config('system.site')->get('mail');
$message['subject'] = t('@messsender has sent you a message!', array('@messsender' => $params['mess_sender']), $options);
$message['body'][] = '

' .
t('Hello @userreceiver, @messsender your text! 

', array('@userreceiver' => $params['user_receiver'], '@userpath' => $params['user_path'], '@messsender' => $params['mess_sender']), $options).
'';
break;
}
}

And Email.php in deliver() function:
$mailManager = \Drupal::service('plugin.manager.mail');
$module = 'message_notify';
$key = 'newmess';
$to = $mail;

$params['headers']['MIME-Version'] = '1.0';
$params['headers']['Content-Type'] = 'text/html; charset=UTF-8';
$params['headers']['Content-Transfer-Encoding'] = '8Bit';

$currentusername = \Drupal::currentUser()->getUsername();
$params['user_path'] = 'http://yoursite.com' . \Drupal::currentUser()->id();
$params['mess_sender'] = $currentusername;
$receiver = user_load_by_mail($mail);
$params['user_receiver'] = $receiver->getUsername();

$langcode = $receiver->getPreferredLangcode();

$send = true;
$result = $mailManager->mail($module, $key, $to, $langcode, $params, NULL, $send);

Hope it helps

I tried patch #23, but <p>&nbsp;<p> results in  

I've added different solution that instead of showing the html, it renders the html.

https://drupal.stackexchange.com/questions/222201/how-can-i-display-toke... for reference.

We had the same problem as #25, and the patch in #25 worked well, for version 3.0.0-beta.

Patch #25 works for me on 3.0.1.

I have a question about the patch #25 and the usage of Drupal\Core\Render\Markup::create. Is it safe?
I'm afraid we are marking the message sent by the user as safe and sending it as is in the email.
Can someone please confirm or rebut this?

usage of Drupal\Core\Render\Markup::create. Is it safe?

I don't think it is. From the Markup documentation:

This object should only be constructed with a known safe string. If there is any risk that the string contains user-entered data that has not been filtered first, it must not be used.

Yeah, I think you guys are right, I think we need to use Xss::filter() on it. I've created a new patch to allow only a few safe HTML tags.

Can't we simply use $private_message->get('message')->processed ?
This uses \Drupal\text\TextProcessed::getValue and returns a FilteredMarkup which would align with the filter format. It would align with the filter used while Xss::filter may filter way more than expected.

Agree with #33

We need a test to prove that text from email is not HTML-encoded. Also, please use the MR, with patches there's no test run

Fixing credits an hiding patches.

Thank you all