Normalize escaped Hermes rich text

modules/market_management/service.php

@@ -64,6 +64,15 @@ function market_management_sanitize_multiline_html(?string $value): ?string
         return $value;
     }
 
+    for ($decodePass = 0; $decodePass < 3; $decodePass++) {
+        $decoded = html_entity_decode($value, ENT_QUOTES | ENT_HTML5, 'UTF-8');
+        if ($decoded === $value) {
+            break;
+        }
+        $value = $decoded;
+    }
+    $value = preg_replace('/(<a\b[^>]*\bhref\s*=\s*["\'])@url:/iu', '$1', $value) ?? $value;
+
     $tokens = preg_split('/(<\/?a\b[^>]*>|<br\s*\/?>|<\/?strong\s*>)/iu', $value, -1, PREG_SPLIT_DELIM_CAPTURE);
     if ($tokens === false) {
         return htmlspecialchars($value, ENT_QUOTES | ENT_SUBSTITUTE, 'UTF-8');