Modify xsskiller so it keeps content valid, while still escaping unwanted tags and attributes. TODO: remove href values with simple call to JS function. They will be run by browsers, so XSS attack may use AJAX to download whatever it needs. That's after user click, so not that bad, but still not good ;).
Modify xsskiller so it keeps content valid, while still escaping unwanted tags and attributes. TODO: remove href values with simple call to JS function. They will be run by browsers, so XSS attack may use AJAX to download whatever it needs. That's after user click, so not that bad, but still not good ;).

ahwayakchih/templatedtextformatters,ahwayakchih/templatedtextformatters