|
I have to of course accept escaped markup that comes in, I do not render it as markup however, I strip it out. Then I accept the text.
If enough people do this then the utility of escaped markup disappears, and instead what will happen is namespaced xhtml inside these elements.
This is already happening with some of the more technical sites providing rss feeds, the owners of which have realized the problems involved with said escaping.
|