What is the regex for xss script tag?

The regex pattern for xss script tag is ` ]*>`. This pattern validates detects html script tags (basic xss detection).

How do I use this regex in JavaScript?

In JavaScript, create the regex with `const regex = / ]*>/;` and test with `regex.test(yourValue)`. It returns `true` if the value matches.

How do I use this regex in Python?

In Python, use `import re; re.match(r' ]*>', value)`. The raw string prefix (`r`) prevents Python from interpreting backslashes as escape characters.

Is this regex case-sensitive?

By default, yes. To make it case-insensitive, add the `i` flag in JavaScript (`/ ]*>/i`) or use `re.IGNORECASE` in Python.

Regex for XSS Script Tag

Regex Pattern

<script[^>]*>

Detects HTML script tags (basic XSS detection)

Quick Answer

The regex pattern for xss script tag is `<script[^>]*>`. Detects HTML script tags (basic XSS detection). This works in JavaScript, Python, Ruby, PHP, Java, and most regex engines that support PCRE syntax.

Test Examples

Input	Result
<script>	✓ Matches
<script src="evil.js">	✓ Matches
<script type="text/javascript">	✓ Matches
<div>	✗ No match
script	✗ No match
<noscript>	✗ No match

Code Examples

javascript

const regex = /<script[^>]*>/;
const isValid = regex.test(value);

python

import re
pattern = r'<script[^>]*>'
if re.match(pattern, value):
    print("valid")

ruby

pattern = /<script[^>]*>/
if value =~ pattern
  puts "valid"
end

php

if (preg_match('/<script[^>]*>/', $value)) {
    echo "valid";
}

java

String pattern = "<script[^>]*>";
boolean isValid = value.matches(pattern);

Frequently Asked Questions

Related Regex Patterns

SQL Injection Pattern

Basic SQL injection detection patterns

Path Traversal Pattern

Detects directory traversal attempts (../ or ..\)

Email Address

Validates a standard email address format

Email (RFC 5322 Compliant)

RFC 5322 compliant email validation with label length limits

URL (HTTP/HTTPS)

Validates HTTP and HTTPS URLs

URL (Any Protocol)

Matches URLs with any protocol (http, https, ftp, ws, etc.)