note 53292 deleted from function.strip-tags by aharvey
| From: | aharvey@php.net | Date: | Thu, 20 Sep 2012 11:52:02 +0000 |
| Subject: | note 53292 deleted from function.strip-tags by aharvey | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-190908@lists.php.net to get a copy of this message | ||
Note Submitter: anonymous
----
Someone can use attributes like CSS in the tags.
Example, you strip all tagw except <b> then a user can still do <b style="color: red;
font-size: 45pt">Hello</b> which might be undesired.
Maybe BB Code would be something.