nilsteampassnet / TeamPass

    // replace style-attribute, first (if needed)

    if (in_array('style', $this->_evil_attributes, true)) {

      do {

        $count = $temp_count = 0;

        $str = preg_replace('/(<[^>]+)(?<!\w)(style="(:?[^"]*?)"|style=\'(:?[^\']*?)\')/i', '$1' . $this->_replacement, $str, -1, $temp_count);

        $count += $temp_count;

      } while ($count);

    }

    do {

      } while ($count);

    }

    do {

      $count = $temp_count = 0;

      // find occurrences of illegal attribute strings with and without quotes (042 ["] and 047 ['] are octal quotes)

      $str = preg_replace('/(<[^>]+)(?<!\w)(' . $evil_attributes_string . ')\s*=\s*(?:(?:"|\042|\'|\047)(?:[^\\2]*?)(?:\\2)|[^\s>]*)/is', '$1' . $this->_replacement, $str, -1, $temp_count);

      $count += $temp_count;

    } while ($count);

    return (string)$str;

  }