Elgg has a config array for htmlawed that it passes through the [config, htmlawed] plugin hook. In your plugin, you would register to handle that plugin hook and change the array "deny_attribute" = "on*". Briefly, something like:

elgg_register_plugin_hook_handler('config', 'htmlawed', function ($hook, $type, $value, $params) {
    $value['deny_attribute'] = 'on*';
});

Hi Steve, thnakx alot for your help, i changed 'deny_attribute' => 'class, on*', to this 'deny_attribute' => ' on*', and its working fine, one more thing Steve, does changing this cause any security problems?? and i noticed one more thing, its allowing class now but table height is disappearing.. why is this??

thankx alot steve

@steve clay, is it possible to block 10 digit phone numbers with HTMLAWED?

i got an temp solution.. used this plugin http://community.elgg.org/plugins/384766/3.0/loginredirector - its working fine now.. any other solutions for this please??

Hi Kushal!

I will take a look at that issue. Sorry, there was a major blackout in my city.

Rodolfo Hernandez

Arvixe/Elgg Community Liaison