fixed clean_text() SC#76, merged from MOODLE_14_STABLE

lib/weblib.php

@@ -1129,13 +1129,13 @@ function clean_text($text, $format=FORMAT_MOODLE) {
         /// Remove tags that are not allowed
             $text = strip_tags($text, $ALLOWED_TAGS);
 
+        /// Clean up embedded scripts and , using kses
+            $text = cleanAttributes($text);
+
         /// Remove script events
             $text = eregi_replace("([^a-z])language([[:space:]]*)=", "\\1Xlanguage=", $text);
             $text = eregi_replace("([^a-z])on([a-z]+)([[:space:]]*)=", "\\1Xon\\2=", $text);
 
-        /// Clean up embedded scripts and , using kses
-            $text = cleanAttributes($text);
-
             return $text;
     }
 }