Simple RegExp-based HTML Sanitization

clean-html.js

(function() {
  "use strict";

  var RE_COMMENT = /<!--(.*?)-->/g;
  var RE_SCRIPT = /<script[\s>](.*?)<\/script\s*>/ig;

  //simple regex-based cleaning to strip scripts and comments
  function htmlClean(html) {
    var last, clean = (html == null) ? '' : String(html);
    //repeatedly clean markup until cleaning has no more effect
    while (last !== clean) {
      last = clean;
      clean = clean.replace(RE_COMMENT, '');
      clean = clean.replace(RE_SCRIPT, '');
    }
    return clean;
  }
  
})();