I found an area on a site (can't disclose name) that allows you to put input, and returns it in this form:
<p> <strong>text here</strong> </p>
It isn't filtered, so you can put stuff such as
<img src=x>, and it will return it, but it doesn't parse it and I can't figure out why it isn't parsing it. I checked if it converts the brackets to Unicode, but it doesn't.
Does anyone know what it's doing?
EDIT: It does convert brackets to Unicode, but is it possible to bypass this filter somehow?