Bug #62314 [Csd->Nab]: strip_tags - Only one iteration
| From: | rasmus@php.net | Date: | Thu, 14 Jun 2012 12:09:31 +0000 |
| Subject: | Bug #62314 [Csd->Nab]: strip_tags - Only one iteration | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-171252@lists.php.net to get a copy of this message | ||
Edit report at https://bugs.php.net/bug.php?id=62314&edit=1
ID: 62314
Updated by: rasmus@php.net
Reported by: FireFart at gmail dot com
Summary: strip_tags - Only one iteration
-Status: Closed
+Status: Not a bug
Type: Bug
Package: *General Issues
PHP Version: Irrelevant
Block user comment: N
Private report: N
Previous Comments:
------------------------------------------------------------------------
[2012-06-13 15:35:21] FireFart at gmail dot com
wrong
------------------------------------------------------------------------
[2012-06-13 15:31:45] FireFart at gmail dot com
Description:
------------
The "strip_tags" function strips tags only in one iteration.
So the following string can be used to bypass the strip_tags functionality.
I'm not sure if it's a bug or a documentation issue, because a warning on the docs would
also do the job.
Test script:
---------------
<scr<script></script>ipt>alert(document.cookie);</scri<script></script>pt>
------------------------------------------------------------------------
--
Edit this bug report at https://bugs.php.net/bug.php?id=62314&edit=1