regex for stripping javascript on PHP [duplicate]

Question

I want to delete all javascript found on a string with PHP, I'm trying to do it trough preg_replace like this: $text = preg_replace("/<script.*<\/script>/mis", "", $text);

But after doing this, $text is an empty string. What I'm doing wrong? Trying this regex on http://www.phpliveregex.com/ it seems to work, but using it in real life returns me nothing.

try $text = preg_replace("/<script.*?<\/script>/mis", "", $text); — karthik manchala
– karthik manchala, Commented Jun 1, 2015 at 16:37
That seems to work, thank you! Would you care in elaborate about why that extra question mark solved the problem? Regexes are one of the fetaures I don't seem to fully understand on development. — Cornezuelo del Centeno
– Cornezuelo del Centeno, Commented Jun 1, 2015 at 17:04

SCBuergel · Accepted Answer · 2015-06-01 16:40:19Z

1

Typically you do not just want to remove (escape) javascript but all sorts of HTML tags which prevent a vulnerability to you. You can do so using http://docs.php.net/manual/en/function.htmlspecialchars.php or http://docs.php.net/manual/en/function.htmlentities.php

Then you dont have to bother with regex altogether.

answered Jun 1, 2015 at 16:40

SCBuergel

1,65317 silver badges26 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Cornezuelo del Centeno Over a year ago

This is escaping them, I need to remove them. I'm indexing mail bodies into Amazon CloudSearch and for compression (and because I won't need to search javascript on my index, only the text of the mails) I need to remove them all. Also a lot of mails are having CDATA info on the body and is giving me a lot of troubles when parsing the XML.

Collectives™ on Stack Overflow

regex for stripping javascript on PHP [duplicate]

1 Answer 1

1 Comment

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Linked

Related