Report question

Question: How to prevent Javascript injection attacks within user-generated HTML