Add missing RemoveOnAttributes class for FormValidator filter - refs …

…BT#22293

public/main/inc/lib/formvalidator/FormValidator.class.php

@@ -2,6 +2,8 @@
 
 /* For licensing terms, see /license.txt */
 
+use Chamilo\CoreBundle\Component\HTMLPurifier\Filter\RemoveOnAttributes;
+
 /**
  * Class FormValidator
  * create/manipulate/validate user input.

src/CoreBundle/Component/HTMLPurifier/Filter/RemoveOnAttributes.php

@@ -0,0 +1,29 @@
+<?php
+
+/* For licensing terms, see /license.txt */
+
+declare(strict_types=1);
+
+namespace Chamilo\CoreBundle\Component\HTMLPurifier\Filter;
+
+use HTMLPurifier_Filter;
+
+class RemoveOnAttributes extends HTMLPurifier_Filter
+{
+    /**
+     * @var string
+     */
+    public $name = 'RemoveOnAttributes';
+
+    public function preFilter($html, $config, $context): string
+    {
+        return self::filter($html);
+    }
+
+    public static function filter($html): string
+    {
+        $pattern = '/\s*on\w+=(?:"[^"]*"|\'[^\']*\'|[^\s>]+)/i';
+
+        return preg_replace($pattern, '', $html);
+    }
+}