Bug #62314 [Opn->Csd]: strip_tags - Only one iteration
| From: | FireFart at gmail dot com | Date: | Wed, 13 Jun 2012 15:35:22 +0000 |
| Subject: | Bug #62314 [Opn->Csd]: strip_tags - Only one iteration | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-171238@lists.php.net to get a copy of this message | ||
Edit report at https://bugs.php.net/bug.php?id=62314&edit=1
ID: 62314
User updated by: FireFart at gmail dot com
Reported by: FireFart at gmail dot com
Summary: strip_tags - Only one iteration
-Status: Open
+Status: Closed
Type: Bug
Package: *General Issues
PHP Version: Irrelevant
Block user comment: N
Private report: N
New Comment:
wrong
Previous Comments:
------------------------------------------------------------------------
[2012-06-13 15:31:45] FireFart at gmail dot com
Description:
------------
The "strip_tags" function strips tags only in one iteration.
So the following string can be used to bypass the strip_tags functionality.
I'm not sure if it's a bug or a documentation issue, because a warning on the docs would
also do the job.
Test script:
---------------
<scr<script></script>ipt>alert(document.cookie);</scri<script></script>pt>
------------------------------------------------------------------------
--
Edit this bug report at https://bugs.php.net/bug.php?id=62314&edit=1