We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent c0b870f commit 3052284Copy full SHA for 3052284
src/wp-includes/html-api/class-wp-html-tag-processor.php
@@ -3735,7 +3735,10 @@ public function set_modifiable_text( string $plaintext_content ): bool {
3735
* properly escape these things, but this could mask regex patterns
3736
* that previously worked. Resolve this by not sending `</script`
3737
*/
3738
- if ( false !== stripos( $plaintext_content, '</script' ) ) {
+ if (
3739
+ false !== stripos( $plaintext_content, '</script' ) ||
3740
+ false !== stripos( $plaintext_content, '<script' )
3741
+ ) {
3742
/*
3743
* JavaScript can be safely escaped.
3744
* Non-JavaScript script tags have unknown semantics.
0 commit comments