remove scripts later in the queue

Author: pfefferle

includes/class-shortcodes.php

@@ -197,9 +197,6 @@ public static function content( $atts, $content, $tag ) {
 
 		$content = \get_post_field( 'post_content', $post );
 
-		// replace script and style elements
-		$content = \preg_replace( '@<(script|style)[^>]*?>.*?</\\1>@si', '', $content );
-
 		if ( 'yes' === $atts['apply_filters'] ) {
 			$content = \apply_filters( 'the_content', $content );
 		} else {
@@ -208,6 +205,9 @@ public static function content( $atts, $content, $tag ) {
 			$content = wp_filter_content_tags( $content );
 		}
 
+		// replace script and style elements
+		$content = \preg_replace( '@<(script|style)[^>]*?>.*?</\\1>@si', '', $content );
+
 		$content = \trim( \preg_replace( '/[\n\r\t]/', '', $content ) );
 
 		return $content;

tests/test-class-activitypub-shortcodes.php

@@ -10,7 +10,7 @@ public function test_content() {
 		$post->post_date = current_time( 'mysql' );
 		$post->post_date_gmt = current_time( 'mysql', 1 );
 		$post->post_title = 'Some title or other';
-		$post->post_content = '<script>test</script>hallo';
+		$post->post_content = '<script>test</script>hallo<script type="javascript">{"asdf": "qwerty"}</script><style></style>';
 		$post->post_status = 'publish';
 		$post->comment_status = 'closed';
 		$post->ping_status = 'closed';