Strip all unsafe HTML elements.

Jot is cool, but why does it not strip out all unsafe HTML elements, if I put the following;

<p><strong>Hello</strong>
<em>Italic</em>
Underline</p>
or...

an xss test;
<p>’;alert(String.fromCharCode(88,83,83))//\’;alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//\";alert(String.fromCharCode(88,83,83))//-->">’></p>

It outputs it verbatim (it does not run it), but it sure looks unsafe and unsightly.

Ideally I’d like it to just clean up incoming text properly. I’ve tried the HTMLPurifier mod for Jot but it doesn’t even make any changes to what I type in.

Thanks

Did you try this Purifier plugin
This post has some good discussion on this as well.

in the Jot class file, you could insert this: (approx. line 489)