Why does HTMLPurifier work this way?

Question

Kohana

I installed the HTMLPurifier template for Kohana, trying to filter the text (with the default HTMLPurifier settings):

<script type="text/javascript">
<!--
  alert('1');
-->
</script>

As a result I get:

<script type="text/javascript"><!--//--><![CDATA[//><!--
alert('1');
//--><!]]></script>

Но этот код успешно выполняется в браузере, почему так?
Может есть пример настроек HTMLPurifier для Kohana ?

Answer 1

Why did you put HTML comments into JS?
Everything is simpler, even if you write in the html tag <script> </script> , it's still javascript, and you need to comment it as if you were commenting the js file.
That is NOT

<script type="text/javascript">
<!--
  alert('1');
-->
</script>

BUT:

<script type="text/javascript">
  //alert('1');
</script>

Even the toaster parser understood me correctly, and highlighted the comment only in 2 cases.