From 3e5d9de01eb58d68e5e5028cd0656ac4026af95b Mon Sep 17 00:00:00 2001
From: Angel Fernando Quiroz Campos <1697880+AngelFQC@users.noreply.github.com>
Date: Wed, 12 Feb 2025 15:01:51 -0500
Subject: [PATCH] Add missing RemoveOnAttributes class  for FormValidator
 filter - refs BT#22293

---
 .../lib/formvalidator/FormValidator.class.php |  2 ++
 .../Filter/RemoveOnAttributes.php             | 29 +++++++++++++++++++
 2 files changed, 31 insertions(+)
 create mode 100644 src/CoreBundle/Component/HTMLPurifier/Filter/RemoveOnAttributes.php

diff --git a/public/main/inc/lib/formvalidator/FormValidator.class.php b/public/main/inc/lib/formvalidator/FormValidator.class.php
index 4570d43ebb5..94ad843301f 100644
--- a/public/main/inc/lib/formvalidator/FormValidator.class.php
+++ b/public/main/inc/lib/formvalidator/FormValidator.class.php
@@ -2,6 +2,8 @@
 
 /* For licensing terms, see /license.txt */
 
+use Chamilo\CoreBundle\Component\HTMLPurifier\Filter\RemoveOnAttributes;
+
 /**
  * Class FormValidator
  * create/manipulate/validate user input.
diff --git a/src/CoreBundle/Component/HTMLPurifier/Filter/RemoveOnAttributes.php b/src/CoreBundle/Component/HTMLPurifier/Filter/RemoveOnAttributes.php
new file mode 100644
index 00000000000..93589f4970b
--- /dev/null
+++ b/src/CoreBundle/Component/HTMLPurifier/Filter/RemoveOnAttributes.php
@@ -0,0 +1,29 @@
+<?php
+
+/* For licensing terms, see /license.txt */
+
+declare(strict_types=1);
+
+namespace Chamilo\CoreBundle\Component\HTMLPurifier\Filter;
+
+use HTMLPurifier_Filter;
+
+class RemoveOnAttributes extends HTMLPurifier_Filter
+{
+    /**
+     * @var string
+     */
+    public $name = 'RemoveOnAttributes';
+
+    public function preFilter($html, $config, $context): string
+    {
+        return self::filter($html);
+    }
+
+    public static function filter($html): string
+    {
+        $pattern = '/\s*on\w+=(?:"[^"]*"|\'[^\']*\'|[^\s>]+)/i';
+
+        return preg_replace($pattern, '', $html);
+    }
+}