Note: this code can't be displayed in the blog post as Galaxie Blog is reverting this code back to it's original form. 

<pre class="language-javascript"><code>function bypassScriptProtection(s){
	/* Replace '&lt;script' with '&lt;attachScript'. */
	var s = replaceNoCase(s,'&lt;script','&lt;attachScript', 'all');
	/* Replace the end tag */
	var s = replaceNoCase(s,'&lt;/script','&lt;/attachScript', 'all');
	/* Use the same logic for stylesheets */
	var s = replaceNoCase(s,'&lt;style','&lt;attachStyle', 'all');
	/* Replace the end tag */
	var s = replaceNoCase(s,'&lt;/style','&lt;/attachStyle', 'all');
	/* Replace iframes */
	var s = replaceNoCase(s,'&lt;iframe','&lt;attachIframe', 'all');
	var s = replaceNoCase(s,'&lt;/iframe','&lt;/attachIframe', 'all');
	/* Now replace the meta tag. There is no closing '&lt;/meta' to worry about */
	var s = replaceNoCase(s,'&lt;meta','&lt;attachMeta', 'all');

	/* Return it */
	return s;
}

/* ReplaceNoCase, scope is either 'all' or 'one' */
/* Gregory Alexander &lt;www.gregoryalexander.com&gt; */
function replaceNoCase(string,subString,replacement, scope){
	if (scope == 'all'){
		/* i is a RegEx ignore case flag, g is global flag */
		var regEx = new RegExp(subString, "ig");
	} else {
		/* i is an RegEx ignore case flag */
		var regEx = new RegExp(subString, "i");
	}
	/* i is an ignore case flag, g is global flag */
	var regEx = new RegExp(subString, "ig");
	var result = string.replace(regEx, replacement);
	return result;
}
</code></pre>

<script language="javascript">
	var scriptTag = '<script></script';
	var metaTag = '<meta>';

	alert(bypassScriptProtection(scriptTag));
	alert(bypassScriptProtection(metaTag));

function bypassScriptProtection(s){
	/* Replace '<script' with '<attachScript'. */
	var s = replaceNoCase(s,'<script','<attachScript', 'all');
	/* Replace the end tag */
	var s = replaceNoCase(s,'</script','</attachScript', 'all');
	/* Use the same logic for stylesheets */
	var s = replaceNoCase(s,'<style','<attachStyle', 'all');
	/* Replace the end tag */
	var s = replaceNoCase(s,'</style','</attachStyle', 'all');
	/* Replace iframes */
	var s = replaceNoCase(s,'<iframe','<attachIframe', 'all');
	var s = replaceNoCase(s,'</iframe','</attachIframe', 'all');
	/* Now replace the meta tag. There is no closing '</meta' to worry about */
	var s = replaceNoCase(s,'<meta','<attachMeta', 'all');

	/* Return it */
	return s;
}
	
/* ReplaceNoCase, scope is either 'all' or 'one' */
/* Gregory Alexander <www.gregoryalexander.com> */
function replaceNoCase(string,subString,replacement, scope){
	if (scope == 'all'){
		/* i is a RegEx ignore case flag, g is global flag */
		var regEx = new RegExp(subString, "ig");
	} else {
		/* i is an RegEx ignore case flag */
		var regEx = new RegExp(subString, "i");
	}
	/* i is an ignore case flag, g is global flag */
	var regEx = new RegExp(subString, "ig");
	var result = string.replace(regEx, replacement);
	return result;
}

</script>