Warning_512, От XSS может спасти следующий набор RegExp
$this->unsafe_html[] = ‘!javascript\s*:!is’;
$this->unsafe_html[] = ‘!vbscri?pt\s*:!is’;
$this->unsafe_html[] = ‘!unsafe_html[] = ‘!]*[^a-z]onabort\s*=!is’;
$this->unsafe_html[] = ‘!]*[^a-z]onblur\s*=!is’;
$this->unsafe_html[] = ‘!]*[^a-z]onchange\s*=!is’;
$this->unsafe_html[] = ‘!]*[^a-z]onfocus\s*=!is’;
$this->unsafe_html[] = ‘!]*[^a-z]onmouseout\s*=!is’;
$this->unsafe_html[] = ‘!]*[^a-z]onmouseover\s*=!is’;
$this->unsafe_html[] = ‘!]*[^a-z]onload\s*=!is’;
$this->unsafe_html[] = ‘!]*[^a-z]onreset\s*=!is’;
$this->unsafe_html[] = ‘!]*[^a-z]onselect\s*=!is’;
$this->unsafe_html[] = ‘!]*[^a-z]onsubmit\s*=!is’;
$this->unsafe_html[] = ‘!]*[^a-z]onunload\s*=!is’;
$this->unsafe_html[] = ‘!]*[^a-z]onerror\s*=!is’;
$this->unsafe_html[] = ‘!]*[^a-z]onclick\s*=!is’;
