PHP Codeigniter 绕过html_scape function

Question

I am running a php codeigniter app, and I need to bypass the html_escape function to insert embeded html code into the database.

这是我需要插入数据库的示例：

<script type='text/javascript' charset='utf-8' scr='https://www.buzzsprout.com/423805.js?container_id=buzzsprout-small-player-423805&player=small'></script>

我试过了

$data['url'] = $this->input->post('podcast_url');

但它不断将[removed][removed]插入数据库。 如果我只使用链接，它工作正常。

有没有办法绕过它？

Answer 1

将application/config/config.php中的配置更改为

$config['global_xss_filtering'] = FALSE;

参考

相关问题：- Codeigniter - 基于帖子禁用 XSS 过滤