Re: whitelisting HTML tags

I'm fond of the BB/Markdown sorts of solutions, which use an HTML-like
language which you translate into HTML. If your parser tosses things
it doesn't understand, this can be a good solution to the (often real)
requirement of "we need to let users enter more than plain text."

Adam

On Wed, Nov 02, 2005 at 11:17:33AM -0500, Tim wrote:
|
| > This is exactly the sort of thing I'm looking for. Anyone know of any
| > libraries (preferably in Java) that already do this?
|
| I personally feel it is a bad idea to allow any HTML, but if it is a
| requirement, you might be best off requiring users use XHTML tags. That
| way you can create a restrictive XML DTD for them, and there are plenty
| of tools out there that can enforce that.
|
| tim
Received on Nov 04 2005