Clearing html attributes

Question

PHP

Hello!
What is the best way to clean up custom html?
I do so:
1. I delete all tags, except resolved
2. I delete attributes reg. expression:
~\s*(on*).*\=.*\".*\"~is
what do you recommend? and how miserable reg. expression?

Answer 1

HTML Purifier or equivalents. Or you can rebuild the tree using DOMDocument. Regular expressions won't work - helpless in case of XSS.

Answer 2

Why not do the same with attributes - remove everything except those allowed, and those allowed to be checked for validity?

Answer 3

look at tinymce for regular expression code. There, on account of this, everything that your heart desires is configured. Excellent visualizer.