It's really not that difficult if you use a parser + whitelist. You don't have t...

anykey on Nov 17, 2012 | parent | context | favorite | on: HTML5 Security Cheatsheet: What your browser does ...

It's really not that difficult if you use a parser + whitelist. You don't have to care about this sort of thing if you limit people to using certain tags/attributes in WYSIWYG editors and other inputs.