d that you use a <a href="https://en.wikipedia.org/wiki/Whitelist">whitelist</a> of permitted HTML tags, attributes and attribute values, as opposed to a <a href="https://en.wikipedia.org/wiki/Blacklisting">blacklist</a> to sanitize the user input. It&#39;s also highly recommended that you use a proper HTML parser, instead of regular expressions for sanitization, because regular expressions are extremely difficult to test for all edge cases.</p>
<hr>
<h3 id="scripts-that-do-not-run"><a href="#scripts-that-d