It’s impossible to overemphasize the need to sanitize user input that will be displayed to users in a Web application. Just ask MySpace.
Sanitize your input
October 13, 2005
rc3.org is a personal tech blog founded back in 1998. This post is one of roughly 10,000 published since then.