fix: unable to save search query with before and after dates

src/CONST.ts

@@ -1730,9 +1730,8 @@ const CONST = {
     // 8 alphanumeric characters
     RECOVERY_CODE_REGEX_STRING: /^[a-zA-Z0-9]{8}$/,
 
-    // The server has a WAF (Web Application Firewall) which will strip out HTML/XML tags using this regex pattern.
-    // It's copied here so that the same regex pattern can be used in form validations to be consistent with the server.
-    VALIDATE_FOR_HTML_TAG_REGEX: /<([^>\s]+)(?:[^>]*?)>/g,
+    // The server has a WAF (Web Application Firewall) which will strip out HTML/XML tags.
+    VALIDATE_FOR_HTML_TAG_REGEX: /<\/?\w*((\s+\w+(\s*=\s*(?:"(.|\n)*?"|'(.|\n)*?'|[^'">\s]+))?)+\s*|\s*)\/?>/g,
 
     // The regex below is used to remove dots only from the local part of the user email (local-part@domain)
     // so when we are using search, we can match emails that have dots without explicitly writing the dots (e.g: fistlast@domain will match first.last@domain)

tests/unit/Search/SearchQueryUtilsTest.ts

@@ -1,5 +1,6 @@
 /* eslint-disable @typescript-eslint/naming-convention */
 // we need "dirty" object key names in these tests
+import CONST from '@src/CONST';
 import {buildQueryStringFromFilterFormValues, getQueryWithUpdatedValues, shouldHighlight} from '@src/libs/SearchQueryUtils';
 import type {SearchAdvancedFiltersForm} from '@src/types/form';
 
@@ -155,6 +156,7 @@ describe('SearchQueryUtils', () => {
             expect(result).toEqual(
                 'sortBy:date sortOrder:desc type:expense from:[email protected],[email protected] to:[email protected] category:finance,insurance date<2025-03-10 date>2025-03-01 amount>1 amount<1000',
             );
+            expect(result).not.toMatch(CONST.VALIDATE_FOR_HTML_TAG_REGEX);
         });
     });