[threedaymonk]

I don't think this has to be a problem: it's actually rather straightforward to write some XSLT to process incoming XML and emit only whitelisted elements and attributes.