How do I use JQuery to remove all "script" tags in a string of HTML?
This should work for you:
var stringOfHtml = // your string here
$(stringOfHtml).find('script').remove();
To get the new string with the script tags removed:
var stringOfHtml = "<div><script></script><span></span></div>";
var html = $(stringOfHtml);
html.find('script').remove();
var stringWithoutScripts = html.wrap("<div>").parent().html(); // have to wrap for html to get the outer element
JS Fiddle Example - Had to use p instead of script as script broke the fiddle, same principle though.
Actual working answer here (hopefully)
Here is a workaround for the script issue, use replace to swap the script text with something else (try and make it unique) then remove those new tags and use replace again to swap back in case script is used anywhere else in text. Yes, it does use regex, but not to remove the script tags so I'm hoping that's alright ;):
var stringOfHtml = "<p></p><script>alert('fail');</scr" + "ipt><span></span>";
var wrappedString = '<div>' + stringOfHtml + '</div>';
var noScript = wrappedString.replace(/script/g, "THISISNOTASCRIPTREALLY");
var html = $(noScript);
html.find('THISISNOTASCRIPTREALLY').remove();
alert(html.html().replace(/THISISNOTASCRIPTREALLY/g, 'script'));
JS Fiddle Workaround
JS Fiddle Example With Script Text
Old question, but if you are still looking for the easiest way to remove scripts from a string try
$.parseHTML(string);
$.parseHTML() automatically removes script tags from strings.
Edit:
This works because keepScripts
has false value as default. (Reference: $.parseHtml)
$.parseHTML(data, context, keepScripts)