MC-41412: Improve inline translation.

Author: StasKozar

lib/internal/Magento/Framework/Filter/Input/MaliciousCode.php

@@ -30,7 +30,7 @@ class MaliciousCode implements \Zend_Filter_Interface
         '/(ondblclick|onclick|onkeydown|onkeypress|onkeyup|onmousedown|onmousemove|onmouseout|onmouseover|onmouseup|'.
         'onload|onunload|onerror)=[^<]*(?=\/*\>)/Uis',
         //tags
-        '/<\/?(script|meta|link|frame|iframe|object).*>/Uis',
+        '/<\/?\??(script|meta|link|frame|iframe|object|php).*>/Uis',
         //base64 usage
         '/src=[^<]*base64[^<]*(?=\/*\>)/Uis',
     ];

lib/internal/Magento/Framework/Filter/Test/Unit/Input/MaliciousCodeTest.php

@@ -112,6 +112,7 @@ public function filterDataProvider()
             'Nested malicious tags' => [
                 '<scri<script>pt>alert(1);</scri<script>pt>',
                 'alert(1);',
+                '<?php echo "test"?>',
             ]
         ];
     }