在php / javascript中删除清洁剂

Question

I have an assignment that is to plant security bug and I though of convert back a sanitized input to unsanitized input.

For example:

Convert

<script>alert("document.cookie");</script>

back to

<script>alert("document.cookie");</script>

Answer 1

You could use html_entity_decode() for this.

Example:

$code = '<script>alert("document.cookie");</script>';
echo html_entity_decode($code);

The above would print:

<script>alert("document.cookie");</script>