style attirbute completely removed??

hi..

i am using a RTE EDITOR ( free rich text editor ) i am passing the html generated by it through the HTMLpurifier.

but the output of HTMLpurifier is everything except the style attributes in my HTML. why so? then the purpose of using an rte editor is defeated. can some one tell me. will there be any xss using style attribute also? why is it removed by HTMLpurifier ? i want to allow that attribute what should i do?

example: rte generated html:

<h1 style="font-family: tahoma; color: rgb(255, 0, 0); font-weight: bold; font-style: italic; text-decoration: underline line-through; text-align: center;"><font size="7">adf</font></h1>

the output of HTMLpurifier is

<h1><font size="7">adf</font></h1>

As you can see here, HTML Purifier by default preserves style attributes. Two things:

1. Make sure magic quotes is off
2. Make sure you've allowed the style attribute if you've restricted allowed tags/attributes

HTMLPurifier_ConfigSchema::define(
    'HTML', 'AllowedAttributes', null, 'lookup/null', '
<p>
    If HTML Purifier\'s attribute set is unsatisfactory, overload it! 
    The syntax is "tag.attr" or "*.attr" for the global attributes 
    (style, id, class, dir, lang, xml:lang).
</p>
<p>
    <strong>Warning:</strong> If another directive conflicts with the 
    elements here, <em>that</em> directive will win and override. For 
    example, %HTML.EnableAttrID will take precedence over *.id in this 
    directive.  You must set that directive to true before you can use 
    IDs at all. This directive has been available since 1.3.0.
</p>
');

this is my allowed attributes. i urgently need to fix up this. i cant read the entire documentation. what i did is. just simply downloaded and extracted the zip file. and using

<?php
    require_once '/path/to/htmlpurifier/library/HTMLPurifier.auto.php';
    
    $purifier = new HTMLPurifier();
    $clean_html = $purifier->purify($dirty_html);
?>

this part of code to parse the html. then why is style atttribute not working for me. kindly suggest. asap.

Magic quotes.