>

  <p>
    Publishers should take reasonable measures to ensure potentially
    malicious user input such as cross-site scripting attacks are not
    included in the Activity Streams data they publish.
  </p>

  <p>
    Consumers that re-emit ingested content to end-users MUST take
    reasonable measures if emitting ingested content to make sure
    potentially malicious ingested input is not re-emitted.
  </p>

  <p>
    Consumers that re-emit ingested content for crawling by search
    engines should t