fix(sanitize): Port script/style fix over from main repo.

Fixes #533

Author: SimeonC

dist/textAngular-sanitize.min.js

@@ -341,7 +341,7 @@ function htmlParser(html, handler) {
       }
 
     } else {
-      html = html.replace(new RegExp("(.*)<\\s*\\/\\s*" + stack.last() + "[^>]*>", 'i'),
+      html = html.replace(new RegExp("([^]*)<\\s*\\/\\s*" + stack.last() + "[^>]*>", 'i'),
         function(all, text) {
           text = text.replace(COMMENT_REGEXP, "$1").replace(CDATA_REGEXP, "$1");
 

src/textAngular-sanitize.js

@@ -137,7 +137,7 @@ describe('HTML', function() {
   });
 
   it('should remove script', function() {
-    expectHTML('a<SCRIPT>evil< / scrIpt >c.').toEqual('ac.');
+    expectHTML('a<SCRIPT>\n\revil\n\r< / scrIpt >c.').toEqual('ac.');
   });
 
   it('should remove DOCTYPE header', function() {
@@ -157,7 +157,7 @@ describe('HTML', function() {
   });
 
   it('should remove style', function() {
-    expectHTML('a<STyle>evil</stYle>c.').toEqual('ac.');
+    expectHTML('a<STyle>\n\revil\n\r</stYle>c.').toEqual('ac.');
   });
 
   it('should remove script and style', function() {