Xss Injection Post on andreabaccega.com

snippet_example_a.html

<a href='http://www.example.com' onClick='javascript:alert("blabla");'>Click Me!</a>

snippet_solution.php

<?php
/*
* Allow only a couple of tags + Strip Slashes + Remove any attribute
* /
$almostSafeOutput = preg_replace(
	"/<([a-z][a-z0-9]*)[^>]*?(\/?)>/i",
	'<$1$2>', 
	stripslashes(
		strip_tags(
			$toStrip, 
			'<p><a><b><i><em><u><ul><li><ol><span><div>'
		)
	)
);

snippet_stiptags.php

<?php
   strip_tags($toStrip, '<p><a><b><i><em><u><ul><li><ol><span><div>')