note 12551 deleted from function.strip-tags by jimw

Also worth noting is that STYLE attributes are allowed for all tags. Any tag can be made into a layout-wrecker unless these are stripped out. (STYLE="font-size:5000px;" for instance?) my solution to this and the "onEvent" handler problem: eregi_replace("([ \f\r\t\n\'\"])style=[^>]+", "\\1", $string); eregi_replace("([ \f\r\t\n\'\"])on[a-z]+=[^>]+", "\\1", $string); my regex knowledge is far from all encompassing but this seems to work for every eventuality I could come up with.