Re: whitelisting HTML tags

[Adam Shostack <adam () homeport org>]

I'm fond of the BB/Markdown sorts of solutions, which use an HTML-like
language which you translate into HTML.  If your parser tosses things
it doesn't understand, this can be a good solution to the (often real)
requirement of "we need to let users enter more than plain text."

Adam

On Wed, Nov 02, 2005 at 11:17:33AM -0500, Tim wrote:
| 
| > This is exactly the sort of thing I'm looking for. Anyone know of any
| > libraries (preferably in Java) that already do this?
| 
| I personally feel it is a bad idea to allow any HTML, but if it is a
| requirement, you might be best off requiring users use XHTML tags.  That
| way you can create a restrictive XML DTD for them, and there are plenty
| of tools out there that can enforce that.
| 
| tim