note 94911 deleted from function.strip-tags by thiago

Note Submitter: luciano dot longo at gmail dot com ---- To nauthiz693 at gmail dot com: Have in mind that an attacker can use href attribute of an anchor tag to place malicious code like <a href="javascript:(some malicious code)()">...</a>. So you may want to remove any javascript:(.*)$ from the href attribute when it's allowed.