Webforms strip the "<script>" tag in the last wizard step

[SinergiaCRM]

Tested in last version of SuiteCRM and https://demo.suiteondemand.com/

After creating a form, the javascript code is displayed in the HTML as normal text, this is due that the "<script>" tags dissapear before generating the code in the last step. See images bellow:

Issue

Javascript code in WebForms aren't working cause the script HTML tags are missing

Expected Behavior

The script HTML tags should be present and javascript working

Actual Behavior

Javascript code appears as text in HTML

Possible Fix

Reverting some of last merged PRs

Steps to Reproduce

1. Create a WebToLeadForm
2. See that the javascript code appears in the site as text

Context

This shouldn't be happening.

Your Environment

SuiteCRM Version used: Version 7.12.2
Browser name and version: Chrome Versión 97.0.4692.71 (Build oficial) (64 bits)
Environment name and version: MySQL, PHP 7
Operating System and version: Ubuntu 18.04

[Mac-Rae]

Hi @SinergiaCRM,

There appears to be a simple enough workaround for these issues so I'd say marking as critical would not be required;

For those concerned inserting the following above and below the script section of code before submitting it to your website will fix it;

<script type='text/javascript'>
Exsisting script code in here
</script>

Can confirm however this is a bug in the latest verisions! 👍

[SuiteBot]

This issue has been mentioned on SuiteCRM. There might be relevant details there:

https://community.suitecrm.com/t/problem-mit-angezeigtem-javascript-code-im-web-to-lead-formular/91359/6

[SuiteBot]

This issue has been mentioned on SuiteCRM. There might be relevant details there:

https://community.suitecrm.com/t/issue-with-displayed-javascript-code-in-web-to-lead-form/91360/3

[chris001]

The offending line that strips the <script> tags is likely this one:

SuiteCRM/modules/Campaigns/WebToLeadFormSave.php

Line 88 in 54bc56c

$html = $SugarTiny->cleanEncodedMCEHtml($bodyHTML);

Obviously it wants to strip the <script> tags in order to safely display in the browser without injecting active javascript onto the page.
A solution: generate 2 version: Non-cleaned, and Cleaned.

1. Save the non-cleaned version,
2. Display the raw text of the non-cleaned version, and
3. Actively display the cleaned version on the page, giving the user a live demo of the generated form.