#38967 [Opn->Csd]: strip_tags doesn't remove attributes completely

[felipe]

 ID:               38967
 Updated by:       [EMAIL PROTECTED]
 Reported By:      corinl at gmx dot de
-Status:           Open
+Status:           Closed
 Bug Type:         Feature/Change Request
 Operating System: linux
 PHP Version:      5.1.6
 New Comment:

This seems be fixed... At least, it doesn't occur in 5.2.6.


Previous Comments:
------------------------------------------------------------------------

[2006-09-26 22:41:29] corinl at gmx dot de

Description:
------------
when a tag attribute contains a <, it does not get removed properly.

Reproduce code:
---------------
<?
$s = <<<EOT
nothing should be between this - <img
src="http://static.flickr.com/105/253610807_10f90540d3.jpg?v=0"; alt=""
style="max-width:50px;width:expression(this.width>50?50:true);"></img> -
and this.
EOT;
echo($s);
echo('<hr>');
echo('original: '.htmlentities($s));
echo('<hr>');
echo('stripped: '.htmlentities(strip_tags($s)));
?>

Expected result:
----------------
stripped: nothing should be between this -  - and this.

Actual result:
--------------
stripped: nothing should be between this - 50?50:true);"> - and this.


------------------------------------------------------------------------


-- 
Edit this bug report at http://bugs.php.net/?id=38967&edit=1