From e7df6b4fc6c501578799aa6256f42d50dd4c7a38 Mon Sep 17 00:00:00 2001
From: Coleman Watts <coleman@civicrm.org>
Date: Tue, 18 Oct 2016 20:13:55 -0400
Subject: [PATCH] CRM-18953 - Better cleanup of news widget markup

---
 CRM/Dashlet/Page/Blog.php | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/CRM/Dashlet/Page/Blog.php b/CRM/Dashlet/Page/Blog.php
index 28d0786c01..9b8b821c07 100644
--- a/CRM/Dashlet/Page/Blog.php
+++ b/CRM/Dashlet/Page/Blog.php
@@ -142,9 +142,10 @@ class CRM_Dashlet_Page_Blog extends CRM_Core_Page {
         foreach ($channel->item as $item) {
           $item = (array) $item;
           $item['title'] = strip_tags($item['title']);
-          // Clean up description - remove tags that would break dashboard layout
+          // Clean up description - remove tags & styles that would break dashboard layout
           $description = preg_replace('#<h[1-3][^>]*>(.+?)</h[1-3][^>]*>#s', '<h4>$1</h4>', $item['description']);
-          $description = strip_tags($description, "<a><p><h4><h5><h6><b><i><em><strong><ol><ul><li><dd><dt><code><pre><br/>");
+          $description = strip_tags($description, "<a><p><h4><h5><h6><b><i><em><strong><ol><ul><li><dd><dt><code><pre><br><hr>");
+          $description = preg_replace('/(<[^>]+) style=["\'].*?["\']/i', '$1', $description);
           // Add paragraph markup if it's missing.
           if (strpos($description, '<p') === FALSE) {
             $description = '<p>' . $description . '</p>';
-- 
2.25.1