[colomon]

As jbert pointed out, if your program's main job is to say whether or not something is safe, and it liberally says "Oh yeah, I think that's safe", that's pretty much the exact opposite of "be conservative in what you do".

[im3w1l]

Please explain the proper way of escaping/rejecting html in forum posts, when you can't rely on the browsers following the spec.