I've got an input format that has virtually no filters - the only things enabled are html corrector, line breaks, image resize (From image_resize module), and url filter. As soon as I enable bbcode module any javascript I've embedded in the node body is disabled and the script is written in the html.

Easy enough to just create a new input format without bbcode (I only need js for 1 or 2 nodes and only of page content type) so it's not a big deal, just took me a while to figure out which filter was causing the issue.

Comments

will.gresham’s picture

will.gresham commented
Status: Active » Closed (works as designed)

Look at line 10 of bbcode-filter.inc
$body = preg_replace(array('#<script([^>]*)>#i', '#</script([^>]*)>#i'), array('&lt;script\\1&gt;', '&lt;/script\\1&gt;'), $body);

This replaces < and > characters with &lt; and &gt; to help prevent XSS and script injection.