note 88179 deleted from function.strip-tags by aharvey

Note Submitter: tleblan at pricegrabber dot com ---- I think it is worth mentioning that if some tags are allowed using the second parameter, this function does not allow to strip attributes within the allowed tags and hence should not be used against XSS vulnerabilities. One can still execute javascript by 2 means: - by inserting attributes that typically accept javascript >> onClick="alert('XSS');" - by using styles >> style="width:expression(alert('XSS'));" (works on IE7 and probably >> other versions)