Re: whitelisting HTML tags

[Richard Moore <rich () westpoint ltd uk>]

Jeff Robertson wrote:
> I need to tell my development to limit the HTML tags allowed in input to a
> subset that can't be used for XSS.

Can you simply limit your input to character markup tags like
<b>, <i> etc?

Rich.
--
Richard Moore, Principal Software Engineer,
Westpoint Ltd,
Albion Wharf, 19 Albion Street, Manchester, M1 5LN, England
Tel: +44 161 237 1028
Fax: +44 161 237 1031