As designed Unfurled description displays html tags "as is"

[Kruzya]

Affected version

2.1.3

For example:

Let's Encrypt

Let's Encrypt is a free, automated, and open certificate authority brought to you by the nonprofit Internet Security Research Group (ISRG).

letsencrypt.org

XF displays tag a "as is".

 

[Chris D]

That's how it is in the description of their page and we wouldn't attempt to render any HTML from a third party source.

You can see Facebook handles it in the same way: