Allowed tags:
array(12) { [0]=> string(1) "b" [1]=> string(2) "h1" [2]=> string(2) "h2" [3]=> string(2) "h3" [4]=> string(2) "h4" [5]=> string(2) "h5" [6]=> string(1) "i" [7]=> string(1) "p" [8]=> string(6) "strong" [9]=> string(3) "sup" [10]=> string(8) "textarea" [11]=> string(1) "u" }
No on* attributes!
<?php print $_SERVER['REQUEST_URI']; ?>/upload/blog/2569/xssPoC.php