PHP Function for XSS

Building a new website where users have a profile. I'd like the users to be able to style, but not have the use of external sites, or obvious xss.

you can use wysiwyg tool, do not need to use external links or use of xss that is not for custom style on website but a type of attack.