Update

- Fixed : striping tags that are inputed by the end user.

Author: Blair2004

app/Forms/UserProfileForm.php

@@ -59,7 +59,7 @@ public function processAttribute( $request )
 
             foreach( $request->input( 'attribute' ) as $key => $value ) {
                 if ( in_array( $key, $allowedInputs ) ) {
-                    $user->$key     =   preg_replace( '#<script(.*?)>(.*?)</script>#is', '', $value );
+                    $user->$key     =   strip_tags( $value );
                 }
             }
 

app/Http/Controllers/Dashboard/CrudController.php

@@ -120,7 +120,7 @@ public function crudPost( String $namespace, CrudPostRequest $request )
              * all script tags
              */
             if ( ! empty( $entry->$name ) ) {
-                $entry->$name       =   preg_replace( '#<script(.*?)>(.*?)</script>#is', null, $entry->$name );
+                $entry->$name       =   strip_tags( $entry->$name );
             }
         }
 
@@ -243,7 +243,7 @@ public function crudPut( String $namespace, $id, CrudPutRequest $request  )
              * all script tags
              */
             if ( ! empty( $entry->$name ) ) {
-                $entry->$name       =   preg_replace( '#<script(.*?)>(.*?)</script>#is', null, $entry->$name );
+                $entry->$name       =   strip_tags( $entry->$name );
             }
         }
 

app/Services/Options.php

@@ -154,7 +154,7 @@ public function beforeSave( $option )
         * sanitizing input to remove
         * all script tags
         */
-        $option->value      =   preg_replace( '#<script(.*?)>(.*?)</script>#is', '', $option->value );
+        $option->value      =   strip_tags( $option->value );
 
         return $option;
     }

app/Services/UserOptions.php

@@ -27,7 +27,7 @@ public function beforeSave( $option )
         * sanitizing input to remove
         * all script tags
         */
-        $option->value      =   preg_replace( '#<script(.*?)>(.*?)</script>#is', '', $option->value );   
+        $option->value      =   strip_tags( $option->value );   
 
         return $option;
     }