How to strip HTML tags from string in JavaScript? [duplicate]

by 
cleanText = strInputCode.replace(/<\/?[^>]+(>|$)/g, "");

Distilled from this website (web.achive).

This regex looks for <, an optional slash /, one or more characters that are not >, then either > or $ (the end of the line)

Examples:

'<div>Hello</div>' ==> 'Hello'
 ^^^^^     ^^^^^^
'Unterminated Tag <b' ==> 'Unterminated Tag '
                  ^^

But it is not bulletproof:

'If you are < 13 you cannot register' ==> 'If you are '
            ^^^^^^^^^^^^^^^^^^^^^^^^
'<div data="score > 42">Hello</div>' ==> ' 42">Hello'
 ^^^^^^^^^^^^^^^^^^          ^^^^^^

If someone is trying to break your application, this regex will not protect you. It should only be used if you already know the format of your input. As other knowledgable and mostly sane people have pointed out, to safely strip tags, you must use a parser.

If you do not have acccess to a convenient parser like the DOM, and you cannot trust your input to be in the right format, you may be better off using a package like sanitize-html, and also other sanitizers are available.

More Related Contents:

  1. Parse an HTML string with JS
  2. Scrape web page data generated by javascript
  3. Is it possible to get data from HTML forms into android while using webView?
  4. Parse the JavaScript returned from BeautifulSoup
  5. "&" and ">>" number operator in C++?
  6. Is there a better way to do optional function parameters in JavaScript? [duplicate]
  7. How to split a long array into smaller arrays, with JavaScript
  8. How do I ensure saved click coordinates can be reload to the same place, even if the page layout changed?
  9. How to be notified once a web font has loaded
  10. How to format a float in javascript?
  11. Is there a way to calculate 3D rotation on X and Y axis from a 4×4 matrix
  12. Array.push() makes all elements the same when pushing an object
  13. Javascript to detect Skype?
  14. Find a point in a polyline which is closest to a latlng
  15. How do I round a number in JavaScript?
  16. Closing WebSocket correctly (HTML5, Javascript)
  17. How can I merge TypedArrays in JavaScript?
  18. How to serialize byte[] as simple JSON Array and not as base64 in JSON.net?
  19. Please recommend a JQuery plugin that handles collision detection for draggable elements [closed]
  20. sort json object in javascript
  21. Using ‘let’ as a variable name is not throwing any errors in google v8
  22. Is async await truly non-blocking in the browser?
  23. Listen for changes with localStorage on the same window
  24. Retain scroll position on route change in AngularJS?
  25. Jquery post, response in new window
  26. console.log doesn’t work in CasperJS’ evaluate with setTimeout
  27. Clear localStorage on tab/browser close but not on refresh
  28. JavaScript Callback after calling function
  29. Cannot Upload File to FastAPI backend using JavaScript Fetch API in the frontend
  30. Difference between application/x-javascript and text/javascript content types

Leave a Comment