mirror of
https://github.com/php/php-src.git
synced 2026-04-19 22:11:12 +02:00
600f1f898f
When normalizing tags to check whether they are contained in the set of allowable tags, we must not strip slashes, unless they come immediately after the opening `<`, or immediately before the closing `>`.
9 lines
166 B
PHP
9 lines
166 B
PHP
--TEST--
|
|
Bug #78814 (strip_tags allows / in tag name => whitelist bypass)
|
|
--FILE--
|
|
<?php
|
|
echo strip_tags("<s/trong>b</strong>", "<strong>");
|
|
?>
|
|
--EXPECT--
|
|
b</strong>
|