Removing all script tags from html with JS Regular Expression

by

jQuery uses a regex to remove script tags in some cases and I’m pretty sure its devs had a damn good reason to do so. Probably some browser does execute scripts when inserting them using innerHTML.

Here’s the regex:

/<script\b[^<]*(?:(?!<\/script>)<[^<]*)*<\/script>/gi

And before people start crying “but regexes for HTML are evil”: Yes, they are – but for script tags they are safe because of the special behaviour – a <script> section may not contain </script> at all unless it should end at this position. So matching it with a regex is easily possible. However, from a quick look the regex above does not account for trailing whitespace inside the closing tag so you’d have to test if </script    etc. will still work.

More Related Contents:

  1. Fastest method to escape HTML tags as HTML entities?
  2. Converting user input string to regular expression
  3. What is the best way to parse html in google apps script
  4. How to prevent Javascript injection attacks within user-generated HTML
  5. Javascript regular expression to validate URL
  6. Javascript regex returning true.. then false.. then true.. etc [duplicate]
  7. How to wrap part of a text in a node with JavaScript
  8. Increment a number in a string in with regex
  9. Remove specific HTML tag with its content from javascript string
  10. What is the best way to parse html in google apps script
  11. Removing backslashes from strings in javascript
  12. Remove everything within script and style tags
  13. Find and replace nth occurrence of [bracketed] expression in string
  14. html form that passes information to a variable in javascript [closed]
  15. When to use functional setState
  16. Zoom in on a point (using scale and translate)
  17. Understanding HTML Form Element behavior
  18. how to display a javascript var in html body
  19. textarea character limit
  20. Setting href attribute at runtime
  21. javascript beforeunload detect refresh versus close
  22. how to extract floating numbers from strings in javascript
  23. How do I abort image load requests without using window.stop()
  24. How to change the playing speed of videos in HTML5?
  25. How to pass variable value between different html pages in javascript
  26. Attach a blob to an input of type file in a form
  27. Firefox Web Console Disabled?
  28. Is it possible to make input fields read-only through CSS?
  29. Freeze Header until Irrelevant (HTML, CSS and JS)
  30. How do you split a javascript string by spaces and punctuation?

Leave a Comment