Merge pull request #241 from magento-obsessive-owls/MC-15375

MC-15375: XSS Injection via nested link in Banner

Author: cspruiell

app/code/Magento/PageBuilder/view/adminhtml/web/js/utils/nesting-link-dialog.js

@@ -28,7 +28,7 @@ export default function nestingLinkDialog(
     const dataStoreContent = dataStore.getState() as DataObject;
     const inlineMessage = dataStoreContent[inlineMessageField] as string;
     const linkUrl = dataStoreContent[linkUrlField] as FieldDefaultsInterface;
-    const aLinkRegex = /<a[\s]+([^>]+)>|<a>|<\/a>/igm;
+    const aLinkRegex = /(<a[\s]+[^>]+).+(?=<\/a>)<\/a>/igm;
     if (wysiwyg &&
         inlineMessage.match(aLinkRegex) &&
         linkUrl &&