Looking for a class/function/script to remove harmful tags from formatted text

[guanche]

Hello,

I decided to replace TinyMCE rich text editor with NicEdit because TinyMCE is really heavy and slow.

With TinyMCE it was easy to remove harmful tags like SCRIPT, OBJECT because this script formats text in this way: <strong><em> etc.

Nice edit uses: <span style="font-weight: bold; font-style: italic;">etc, so it's not so easy.

I am looking for a script/class/function to remove dangerous tags from the text.

Is it safe to allow anything inside of <span style=...> ?

Thanks.

[guanche]

Any more ideas what should I add to this function?
I want allow users to change font color, font family, font size, font style, insert links.

function strip_unsafe($string)
{
    $unsafe=array(
    '/<iframe(.*?)<\/iframe>/is',
    '/<title(.*?)<\/title>/is',
    '/<frame(.*?)<\/frame>/is',
    '/<frameset(.*?)<\/frameset>/is',
    '/<object(.*?)<\/object>/is',
    '/<script(.*?)<\/script>/is',
    '/<embed(.*?)<\/embed>/is',
    '/<applet(.*?)<\/applet>/is',
    '/<meta(.*?)>/is',
    '/<!doctype(.*?)>/is',
    '/<link(.*?)>/is',
    '/<body(.*?)>/is',
    '/<\/body>/is',
    '/<style(.*?)>/is',
    '/<\/style>/is',
    '/<head(.*?)>/is',
    '/<\/head>/is',
    '/onload="(.*?)"/is',
    '/onunload="(.*?)"/is',
    '/<img(.*?)>/is',
    '/<html(.*?)>/is',
    '/<\/html>/is');

$string=preg_replace($unsafe, "", $string);

[Weedpacket]

Have you considered using [man]strip_tags[/man]?