[wp-trac] [WordPress Trac] #54138: wp_strip_all_tags should remove scripts/styles content recursively

[WordPress Trac]

#54138: wp_strip_all_tags should remove scripts/styles content recursively
--------------------------+-----------------------------
 Reporter:  wppunk        |      Owner:  (none)
     Type:  defect (bug)  |     Status:  new
 Priority:  normal        |  Milestone:  Awaiting Review
Component:  General       |    Version:
 Severity:  normal        |   Keywords:
  Focuses:                |
--------------------------+-----------------------------
 If we try to run the next code
 `<scri<script></script>pt>alert("krya");</script>` via the
 `wp_strip_all_tags` function it remove the script content only once. So,
 the next hack allows passing the script content throw the function.

 ## In details.

 First iteration:
 - input: `<scri<script></script>pt>alert("krya");</script>
 - output: `<script>alert("krya");</script>`

 Thankfully the `strip_tags` removes scripts tags later, but the content is
 still present.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/54138>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform