blocks|key|263446|text|尝试使用正则表达式删除HTML标记是有问题的。你不知道里面的脚本或属性值是什么。一种方法是将其作为div的innerHTML插入，删除所有脚本元素并返回innerHTML，例如|type|unstyled|depth|inlineStyleRanges|entityRanges|data|263447|++function+stripScripts(s)+{
++++var+div+=+document.createElement('div');
++++div.innerHTML+=+s;
++++var+scripts+=+div.getElementsByTagName('script');
++++var+i+=+scripts.length;
++++while+(i--)+{
++++++scripts[i].parentNode.removeChild(scripts[i]);
++++}
++++return+div.innerHTML;
++}

alert(
+stripScripts('<span><script+type="text/javascript">alert(\'foo\');<\/script><\/span>')
);|code-block|syntax|javascript|263448|请注意，目前，如果使用innerHTML属性插入脚本，浏览器将不会执行该脚本，并且很可能永远不会执行，尤其是因为该元素没有添加到文档中。|263449|entityMap^0|0|0|0^^$0|@$1|2|3|4|5|6|7|K|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|L|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|M|8|@]|9|@]|A|$]]|$1|I|3|-4|5|6|7|N|8|@]|9|@]|A|$]]]|J|$]]

<p>Attempting to remove HTML markup using a regular expression is problematic. You don't know what's in there as script or attribute values. One way is to insert it as the innerHTML of a div, remove any script elements and return the innerHTML, e.g.</p>

<pre><code>  function stripScripts(s) {
    var div = document.createElement('div');
    div.innerHTML = s;
    var scripts = div.getElementsByTagName('script');
    var i = scripts.length;
    while (i--) {
      scripts[i].parentNode.removeChild(scripts[i]);
    }
    return div.innerHTML;
  }

alert(
 stripScripts('&lt;span&gt;&lt;script type="text/javascript"&gt;alert(\'foo\');&lt;\/script&gt;&lt;\/span&gt;')
);
</code></pre>

<p>Note that at present, browsers will not execute the script if inserted using the innerHTML property, and likely never will especially as the element is not added to the document.</p>


blocks|key|2952723|text|在某些情况下，jQuery使用正则表达式来删除脚本标记，我敢肯定它的开发人员有一个非常好的理由这样做。可能某些浏览器在使用innerHTML插入脚本时确实会执行脚本。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|2952724|下面是正则表达式：|2952725|/<script\b[%5E<]*(?:(?!<\/script>)<[%5E<]*)*<\/script>/gi|code-block|syntax|javascript|2952726|在人们开始叫喊“但是HTML的正则表达式是邪恶的”之前：Yes,+they+are+-但是对于脚本标记，它们是安全的，因为它的特殊行为-+<script>部分可能根本不包含</script>，除非它应该在这个位置结束。因此，将其与正则表达式相匹配是很容易的。但是，从快速查看上面的正则表达式没有考虑到结束标记中的尾随空格，所以您必须测试</script、、等是否仍然有效。|2952727|entityMap|0|LINK|mutability|MUTABLE|url|https://stackoverflow.com/questions/1732348/regex-match-open-tags-except-xhtml-self-contained-tags/1732454#1732454^0|1P|9|0|0|0|1X|8|2E|9|4O|8|S|D|0|0^^$0|@$1|2|3|4|5|6|7|W|8|@$9|X|A|Y|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|Z|8|@]|D|@]|E|$]]|$1|H|3|I|5|J|7|10|8|@]|D|@]|E|$K|L]]|$1|M|3|N|5|6|7|11|8|@$9|12|A|13|B|C]|$9|14|A|15|B|C]|$9|16|A|17|B|C]]|D|@$9|18|A|19|1|1A]]|E|$]]|$1|O|3|-4|5|6|7|1B|8|@]|D|@]|E|$]]]|P|$Q|$5|R|S|T|E|$U|V]]]]

<p>jQuery uses a regex to remove script tags in some cases and I'm pretty sure its devs had a damn good reason to do so. Probably some browser <em>does</em> execute scripts when inserting them using <code>innerHTML</code>.</p>

<p>Here's the regex:</p>

<pre><code>/&lt;script\b[^&lt;]*(?:(?!&lt;\/script&gt;)&lt;[^&lt;]*)*&lt;\/script&gt;/gi
</code></pre>

<p>And before people start crying "but regexes for HTML are evil": <a href="https://stackoverflow.com/questions/1732348/regex-match-open-tags-except-xhtml-self-contained-tags/1732454#1732454">Yes, they are</a> - but for script tags they are safe because of the special behaviour - a <code>&lt;script&gt;</code> section may not contain <code>&lt;/script&gt;</code> at all unless it should end at this position. So matching it with a regex is easily possible. However, from a quick look the regex above does not account for trailing whitespace inside the closing tag so you'd have to test if <code>&lt;/script   </code> etc. will still work.</p>


blocks|key|265029|text|正则表达式是可以击败的，但是如果您有一个不想注入到DOM中的字符串版本的HTML，那么它们可能是最好的方法。你可能想把它放在一个循环中来处理类似这样的事情：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|265030|<scr<script>Ha!</script>ipt>+alert(document.cookie);</script>|code-block|syntax|javascript|265031|下面是我使用上面的jquery+regex所做的工作：|265032|var+SCRIPT_REGEX+=+/<script\b[%5E<]*(?:(?!<\/script>)<[%5E<]*)*<\/script>/gi;
while+(SCRIPT_REGEX.test(text))+{
++++text+=+text.replace(SCRIPT_REGEX,+"");
}|265033|entityMap^0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|M|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|N|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|O|8|@]|9|@]|A|$]]|$1|I|3|J|5|D|7|P|8|@]|9|@]|A|$E|F]]|$1|K|3|-4|5|6|7|Q|8|@]|9|@]|A|$]]]|L|$]]

<p>Regexes are beatable, but if you have a string version of HTML that you don't want to inject into a DOM, they may be the best approach. You may want to put it in a loop to handle something like:</p>

<pre><code>&lt;scr&lt;script&gt;Ha!&lt;/script&gt;ipt&gt; alert(document.cookie);&lt;/script&gt;
</code></pre>

<p>Here's what I did, using the jquery regex from above:</p>

<pre><code>var SCRIPT_REGEX = /&lt;script\b[^&lt;]*(?:(?!&lt;\/script&gt;)&lt;[^&lt;]*)*&lt;\/script&gt;/gi;
while (SCRIPT_REGEX.test(text)) {
    text = text.replace(SCRIPT_REGEX, "");
}
</code></pre>


blocks|key|261797|text|在我的例子中，我需要解析出页面标题，并拥有jQuery的所有其他优点，但不包括触发脚本。这是我的解决方案，看起来很管用。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|261798|++++++++$.get('/somepage.htm',+function+(data)+{
++++++++++++//+excluded+code+to+extract+title+for+simplicity
++++++++++++var+bodySI+=+data.indexOf('<body>')+%2B+'<body>'.length,
++++++++++++++++bodyEI+=+data.indexOf('</body>'),
++++++++++++++++body+=+data.substr(bodySI,+bodyEI+-+bodySI),
++++++++++++++++$body;

++++++++++++body+=+body.replace(/<script[%5E>]*>/gi,+'++');

++++++++++++//console.log(body);

++++++++++++$body+=+$('<div>').html(body);
++++++++++++console.log($body.html());
++++++++});|code-block|syntax|javascript|261799|这种快捷键担心脚本，因为您并不是要删除脚本标记和内容，而是使用注释呈现方案来替换它们，以打破它们的无用之处，因为您将拥有分隔脚本声明的注释。|261800|如果这仍然存在问题，请让我知道，因为它也会对我有帮助。|261801|entityMap^0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|M|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|N|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|O|8|@]|9|@]|A|$]]|$1|I|3|J|5|6|7|P|8|@]|9|@]|A|$]]|$1|K|3|-4|5|6|7|Q|8|@]|9|@]|A|$]]]|L|$]]

<p>In my case, I needed a requirement to parse out the page title AND and have all the other goodness of jQuery, minus it firing scripts. Here is my solution that seems to work.</p>

<pre><code>        $.get('/somepage.htm', function (data) {
            // excluded code to extract title for simplicity
            var bodySI = data.indexOf('&lt;body&gt;') + '&lt;body&gt;'.length,
                bodyEI = data.indexOf('&lt;/body&gt;'),
                body = data.substr(bodySI, bodyEI - bodySI),
                $body;

            body = body.replace(/&lt;script[^&gt;]*&gt;/gi, ' &lt;!-- ');
            body = body.replace(/&lt;\/script&gt;/gi, ' --&gt; ');

            //console.log(body);

            $body = $('&lt;div&gt;').html(body);
            console.log($body.html());
        });
</code></pre>

<p>This kind of shortcuts worries about script because you are not trying to remove out the script tags and content, instead you are replacing them with comments rendering schemes to break them useless as you would have comments delimiting your script declarations.</p>

<p>Let me know if that still presents a problem as it will help me too.</p>


blocks|key|2952982|text|这个正则表达式也应该可以工作：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2952983|<script(?:(?!\/\/)(?!\/\*)[%5E'"]%7C"(?:\\.%7C[%5E"\\])*"%7C'(?:\\.%7C[%5E'\\])*'%7C\/\/.*(?:\n)%7C\/\*(?:(?:.%7C\s))*?\*\/)*?<\/script>|code-block|syntax|javascript|2952984|它甚至允许有像这样的“有问题的”变量字符串：|2952985|<script+type="text/javascript">
+++var+test1+=+"</script>";
+++var+test2+=+'\'</script>';
+++var+test1+=+"\"</script>";
+++var+test1+=+"<script>\"";
+++var+test2+=+'<scr\'ipt>';
+++/*+</script>+*/
+++//+</script>
+++/*+'+*/
+++//+var+foo="+'
</script>|2952986|看来jQuery和Prototype在这些上失败了.|2952987|编辑17年7月31日：添加了a)非捕获组以获得更好的性能(并且没有空组)和b)对JavaScript评论的支持。|offset|length|style|BOLD|2952988|entityMap^0|0|0|0|0|0|0|B|0^^$0|@$1|2|3|4|5|6|7|U|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|V|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|W|8|@]|9|@]|A|$]]|$1|I|3|J|5|D|7|X|8|@]|9|@]|A|$E|F]]|$1|K|3|L|5|6|7|Y|8|@]|9|@]|A|$]]|$1|M|3|N|5|6|7|Z|8|@$O|10|P|11|Q|R]]|9|@]|A|$]]|$1|S|3|-4|5|6|7|12|8|@]|9|@]|A|$]]]|T|$]]

<p>This Regex should work too:</p>

<pre><code>&lt;script(?:(?!\/\/)(?!\/\*)[^'"]|"(?:\\.|[^"\\])*"|'(?:\\.|[^'\\])*'|\/\/.*(?:\n)|\/\*(?:(?:.|\s))*?\*\/)*?&lt;\/script&gt;
</code></pre>

<p>It even allows to have "problematic" variable strings like these inside:</p>

<pre><code>&lt;script type="text/javascript"&gt;
   var test1 = "&lt;/script&gt;";
   var test2 = '\'&lt;/script&gt;';
   var test1 = "\"&lt;/script&gt;";
   var test1 = "&lt;script&gt;\"";
   var test2 = '&lt;scr\'ipt&gt;';
   /* &lt;/script&gt; */
   // &lt;/script&gt;
   /* ' */
   // var foo=" '
&lt;/script&gt;
</code></pre>

<p>It seams that jQuery and Prototype fail on these ones...</p>

<p><strong>Edit July 31 '17:</strong> Added a) non-capturing groups for better performance (and no empty groups) and b) support for JavaScript comments.</p>


blocks|key|2953021|text|为什么不使用jQuery.parseHTML()+http://api.jquery.com/jquery.parsehtml/|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|2953022|entityMap|0|LINK|mutability|MUTABLE|url|http://api.jquery.com/jquery.parsehtml/^0|P|13|0|0^^$0|@$1|2|3|4|5|6|7|L|8|@]|9|@$A|M|B|N|1|O]]|C|$]]|$1|D|3|-4|5|6|7|P|8|@]|9|@]|C|$]]]|E|$F|$5|G|H|I|C|$J|K]]]]

<p>Why not using jQuery.parseHTML() <a href="http://api.jquery.com/jquery.parsehtml/" rel="noreferrer">http://api.jquery.com/jquery.parsehtml/</a>?</p>


blocks|key|259573|text|下面是各种shell脚本，您可以使用它们来剥离不同的元素。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|259574|#+doctype
find+.+-regex+".*\.$html\%7Cpy$$"+-type+f+-exec+sed+-i+"s/<\!DOCTYPE\s\%2Bhtml[%5E>]*>/<\!DOCTYPE+html>/gi"+{}+\;

#+meta+charset
find+.+-regex+".*\.$html\%7Cpy$$"+-type+f+-exec+sed+-i+"s/<meta[%5E>]*content=[\"'][%5E\"']*utf-8[\"'][%5E>]*>/<meta+charset=\"utf-8\">/gi"+{}+\;

#+script+text/javascript
find+.+-regex+".*\.$html\%7Cpy$$"+-type+f+-exec+sed+-i+"s/$<script[%5E>]*$$\stype=[\"']text\/javascript[\"']$$\s\?[%5E>]*>$/\1\3/gi"+{}+\;

#+style+text/css
find+.+-regex+".*\.$html\%7Cpy$$"+-type+f+-exec+sed+-i+"s/$<style[%5E>]*$$\stype=[\"']text\/css[\"']$$\s\?[%5E>]*>$/\1\3/gi"+{}+\;

#+html+xmlns
find+.+-regex+".*\.$html\%7Cpy$$"+-type+f+-exec+sed+-i+"s/$<html[%5E>]*$$\sxmlns=[\"'][%5E\"']*[\"']$$\s\?[%5E>]*>$/\1\3/gi"+{}+\;

#+html+xml:lang
find+.+-regex+".*\.$html\%7Cpy$$"+-type+f+-exec+sed+-i+"s/$<html[%5E>]*$$\sxml:lang=[\"'][%5E\"']*[\"']$$\s\?[%5E>]*>$/\1\3/gi"+{}+\;|code-block|syntax|javascript|259575|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

<p>Here are a variety of shell scripts you can use to strip out different elements.</p>

<pre><code># doctype
find . -regex ".*\.$html\|py$$" -type f -exec sed -i "s/&lt;\!DOCTYPE\s\+html[^&gt;]*&gt;/&lt;\!DOCTYPE html&gt;/gi" {} \;

# meta charset
find . -regex ".*\.$html\|py$$" -type f -exec sed -i "s/&lt;meta[^&gt;]*content=[\"'][^\"']*utf-8[\"'][^&gt;]*&gt;/&lt;meta charset=\"utf-8\"&gt;/gi" {} \;

# script text/javascript
find . -regex ".*\.$html\|py$$" -type f -exec sed -i "s/$&lt;script[^&gt;]*$$\stype=[\"']text\/javascript[\"']$$\s\?[^&gt;]*&gt;$/\1\3/gi" {} \;

# style text/css
find . -regex ".*\.$html\|py$$" -type f -exec sed -i "s/$&lt;style[^&gt;]*$$\stype=[\"']text\/css[\"']$$\s\?[^&gt;]*&gt;$/\1\3/gi" {} \;

# html xmlns
find . -regex ".*\.$html\|py$$" -type f -exec sed -i "s/$&lt;html[^&gt;]*$$\sxmlns=[\"'][^\"']*[\"']$$\s\?[^&gt;]*&gt;$/\1\3/gi" {} \;

# html xml:lang
find . -regex ".*\.$html\|py$$" -type f -exec sed -i "s/$&lt;html[^&gt;]*$$\sxml:lang=[\"'][^\"']*[\"']$$\s\?[^&gt;]*&gt;$/\1\3/gi" {} \;
</code></pre>


blocks|key|259584|text|/(?:(?!|type|unstyled|depth|inlineStyleRanges|entityRanges|data|259585|259586|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|E|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|F|8|@]|9|@]|A|$]]|$1|C|3|-4|5|6|7|G|8|@]|9|@]|A|$]]]|D|$]]

<p>/(?:(?!&lt;/s\w)&lt;[^&lt;]<em>)</em>&lt;/s\w*/gi; - Removes any sequence in any combination with </p>


blocks|key|261852|text|无论何时你必须求助于基于正则表达式的脚本标签清理。至少在结束标记中添加一个空格，格式为|type|unstyled|depth|inlineStyleRanges|entityRanges|data|261853|</script\s*>|code-block|syntax|javascript|261854|否则像这样的事情|261855|<script>alert(666)</script+++>|261856|将保留，因为标记名有效后有尾随空格。|261857|entityMap^0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|O|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|P|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|Q|8|@]|9|@]|A|$]]|$1|I|3|J|5|D|7|R|8|@]|9|@]|A|$E|F]]|$1|K|3|L|5|6|7|S|8|@]|9|@]|A|$]]|$1|M|3|-4|5|6|7|T|8|@]|9|@]|A|$]]]|N|$]]

<p>Whenever you have to resort to Regex based script tag cleanup. At least add a white-space to the closing tag in the form of </p>

<pre><code>&lt;/script\s*&gt;
</code></pre>

<p>Otherwise things like</p>

<pre><code>&lt;script&gt;alert(666)&lt;/script   &gt;
</code></pre>

<p>would remain since trailing spaces after tagnames are valid.</p>


blocks|key|2953121|text|如果您想从一些HTML文本中删除所有JavaScript代码，那么删除<script>标记是不够的，因为JavaScript仍然可以存在于"onclick“、"onerror”、"href“和其他属性中。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|2953122|试试这个npm模块，它可以处理所有这些事情：https://www.npmjs.com/package/strip-js|2953123|entityMap|0|LINK|mutability|MUTABLE|url|https://www.npmjs.com/package/strip-js^0|Z|8|0|M|12|0|0^^$0|@$1|2|3|4|5|6|7|P|8|@$9|Q|A|R|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|S|8|@]|D|@$9|T|A|U|1|V]]|E|$]]|$1|H|3|-4|5|6|7|W|8|@]|D|@]|E|$]]]|I|$J|$5|K|L|M|E|$N|O]]]]

<p>If you want to remove all JavaScript code from some HTML text, then removing <code>&lt;script&gt;</code> tags isn't enough, because JavaScript can still live in "onclick", "onerror", "href" and other attributes.</p>

<p>Try out this npm module which handles all of this:
<a href="https://www.npmjs.com/package/strip-js" rel="nofollow">https://www.npmjs.com/package/strip-js</a></p>


blocks|key|265185|text|你可以试试|type|unstyled|depth|inlineStyleRanges|entityRanges|data|265186|$("your_div_id").remove();++|code-block|syntax|javascript|265187|或|265188|+$("your_div_id").html("");+|265189|entityMap^0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|M|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|N|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|O|8|@]|9|@]|A|$]]|$1|I|3|J|5|D|7|P|8|@]|9|@]|A|$E|F]]|$1|K|3|-4|5|6|7|Q|8|@]|9|@]|A|$]]]|L|$]]

<p>You can try </p>

<pre><code>$("your_div_id").remove();  
</code></pre>

<p>or</p>

<pre><code> $("your_div_id").html(""); 
</code></pre>


blocks|key|2953138|text|试试这个：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2953139|var+text+=+text.replace(/<script[%5E>]*>(?:(?!<\/script>)[%5E])*<\/script>/g,+"")|code-block|syntax|javascript|2953140|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

<p>Try this:</p>

<pre><code>var text = text.replace(/&lt;script[^&gt;]*&gt;(?:(?!&lt;\/script&gt;)[^])*&lt;\/script&gt;/g, "")
</code></pre>


blocks|key|265227|text|您可以在不使用正则表达式的情况下完成此操作。只需使用将您的HTML字符串转换为一个HTML节点，使用找到所有脚本，然后直接它们！|type|unstyled|depth|inlineStyleRanges|entityRanges|data|265228|有趣的事实:当你创建一个带有<script>标签的元素时，SO的演示不喜欢它！下面的代码片段不会运行，但它可以在以下位置运行：。|offset|length|style|CODE|265229|​|265230|var+el+=+document.createElement(+'html'+);
el.innerHTML+=+"<p>Valid+paragraph.</p><p>Another+valid+paragraph.</p><script>Dangerous+scripting!!!</script><p>Last+final+paragraph.</p>";

var+scripts+=+el.getElementsByTagName(+'script'+);+//+Live+NodeList+of+your+anchor+elements

for(var+i+=+0;+i+<+scripts.length;+i%2B%2B)+{
++var+script+=+scripts[i];
++script.remove();
}

console.log(el.innerHTML);|code-block|syntax|javascript|265231|265232|这是一个比正则表达式更干净的解决方案，imho。|265233|entityMap^0|0|E|8|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|T|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|U|8|@$D|V|E|W|F|G]]|9|@]|A|$]]|$1|H|3|I|5|6|7|X|8|@]|9|@]|A|$]]|$1|J|3|K|5|L|7|Y|8|@]|9|@]|A|$M|N]]|$1|O|3|I|5|6|7|Z|8|@]|9|@]|A|$]]|$1|P|3|Q|5|6|7|10|8|@]|9|@]|A|$]]|$1|R|3|-4|5|6|7|11|8|@]|9|@]|A|$]]]|S|$]]

<p>You can do this without a regular expression.  Simply cast your HTML string to an HTML node using <a href="https://developer.mozilla.org/en-US/docs/Web/API/Document/createElement" rel="nofollow noreferrer"><strong><code>document.createElement()</code></strong></a>, find all scripts with <a href="https://developer.mozilla.org/en-US/docs/Web/API/Element/getElementsByTagName" rel="nofollow noreferrer"><strong><code>element.getElementsByTagName('script')</code></strong></a>, and then just <a href="https://developer.mozilla.org/en-US/docs/Web/API/ChildNode/remove" rel="nofollow noreferrer"><strong><code>remove()</code></strong></a> them!</p>
<p>Fun fact:  SO's demo does not like it when you create an element with a <code>&lt;script&gt;</code> tag!  The snippet below will not run, but it does work at: <a href="https://jsbin.com/lanakivuba/1/edit?html,js,console,output" rel="nofollow noreferrer"><strong>Full Working Demo at JSBin.com</strong></a>.</p>
<p><div class="snippet" data-lang="js" data-hide="false" data-console="true" data-babel="false">
<div class="snippet-code">
<pre class="snippet-code-js lang-js prettyprint-override"><code>var el = document.createElement( 'html' );
el.innerHTML = "&lt;p&gt;Valid paragraph.&lt;/p&gt;&lt;p&gt;Another valid paragraph.&lt;/p&gt;&lt;script&gt;Dangerous scripting!!!&lt;/script&gt;&lt;p&gt;Last final paragraph.&lt;/p&gt;";

var scripts = el.getElementsByTagName( 'script' ); // Live NodeList of your anchor elements

for(var i = 0; i &lt; scripts.length; i++) {
  var script = scripts[i];
  script.remove();
}

console.log(el.innerHTML);</code></pre>
</div>
</div>
</p>
<p>This is a much cleaner solution than a regex, imho.</p>


<p>I want to strip script tags out of this HTML at Pastebin:</p>
<blockquote>
<p><a href="http://pastebin.com/mdxygM0a" rel="nofollow noreferrer">http://pastebin.com/mdxygM0a</a></p>
</blockquote>
<p>I tried using the below regular expression:</p>
<pre><code>html.replace(/&lt;script.*&gt;.*&lt;\/script&gt;/ims, &quot; &quot;)
</code></pre>
<p>But it does not remove all of the script tags in the HTML. It only removes in-line scripts. I'm looking for some regex that can remove all of the script tags (in-line and multi-line). It would be highly appreciated if a test is carried out on my sample <a href="http://pastebin.com/mdxygM0a" rel="nofollow noreferrer">http://pastebin.com/mdxygM0a</a></p>


Removing all script tags from html with JS Regular Expression

jQuery

我想在Pastebin中从这个HTML中剥离脚本标记： 我尝试使用下面的正则表达式：html.replace(/<script.*>.*<\/script>/ims, " ")但它不会删除HTML中的所有脚本标记。它只删除内联脚本。我正在寻找一些正则表达式，可以删除所有的脚本标记(行内和多行)。如果在我的样本上进行测试...

问使用JS正则表达式从html中删除所有脚本标记
EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问使用JS正则表达式从html中删除所有脚本标记EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问使用JS正则表达式从html中删除所有脚本标记
EN