diff --git a/lib/weblib.php b/lib/weblib.php index 1d7a2207180..584744a9069 100644 --- a/lib/weblib.php +++ b/lib/weblib.php @@ -1666,6 +1666,9 @@ function clean_text($text, $format=FORMAT_MOODLE) { /// Clean up embedded scripts and , using kses $text = cleanAttributes($text); + /// Again remove tags that are not allowed + $text = strip_tags($text, $ALLOWED_TAGS); + /// Remove script events $text = eregi_replace("([^a-z])language([[:space:]]*)=", "\\1Xlanguage=", $text); $text = eregi_replace("([^a-z])on([a-z]+)([[:space:]]*)=", "\\1Xon\\2=", $text);