use regex to remove external script tag

Question

I tried to remove the external script tag from a string using a regular expression.

var data = "<p>Valid paragraph.</p><p>Another valid paragraph.</p><script>alert123</script><script type='text/javascript' src='123'>Dangerous scripting!!!</script><script type='text/javascript' src='123'/><p>Last final paragraph.</p>";

data.replace(/<script[^>]\(\src=\)*>(?:(?!<\/script>)[^])*<\/script>/g, "")

output should be

"<p>Valid paragraph.</p><p>Another valid paragraph.</p><script>alert123</script><p>Last final paragraph.</p>";

but it not validating. how to fix this issue?

Regex is not the right tool to do such stuff. Use some xml parser to modify the XML DOM. — Gurmanjot Singh
– Gurmanjot Singh, Commented Feb 23, 2021 at 5:58

Mohammad Mostafa Dastjerdi · Accepted Answer · 2021-02-23 07:53:20Z

1

here I tested a regex and I think it is what you're looking for:

(<script[^>].*<\/script>)|(<script[^>].*\/\s?>)

https://regexr.com/5n377 see the effect!

EDIT

(<script[^>].*?<\/script>)|(<script[^>].*\/\s?>)
            ^^^ here Edited

edited Feb 23, 2021 at 7:53

answered Feb 23, 2021 at 6:03

Mohammad Mostafa Dastjerdi

7641 gold badge6 silver badges26 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

Mohammad Mostafa Dastjerdi Over a year ago

I fixed the issue. now it works fine @PatrickParker regexr.com/5n3ci

Patrick Parker Over a year ago

ok you fixed one problem with the reluctant qualifier. the other side of the regex still has the same problem with greedy qualifier. and there are countless ways it can fail. regex is the wrong approach here.

Collectives™ on Stack Overflow

use regex to remove external script tag

1 Answer 1

EDIT

2 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

EDIT

2 Comments

Your Answer

Sign up or log in

Post as a guest

Related