Since we're passing a temporary variable by reference, it needs to be committed back onto to the main array. To be honest, I'm not terribly happy with this behavior, but it doesn't seem to break anything.

git-svn-id: http://htmlpurifier.org/svnroot/htmlpurifier/trunk@1251 48356398-32a2-884e-a903-53898d9a118a

library/HTMLPurifier/Strategy/ValidateAttributes.php

@@ -41,6 +41,8 @@ class HTMLPurifier_Strategy_ValidateAttributes extends HTMLPurifier_Strategy
             
             // note that we have no facilities here for removing tokens
             $validator->validateToken($token, $config, $context);
+            
+            $tokens[$key] = $token; // for PHP 4
         }
         
         $context->destroy('IDAccumulator');