You guys should sanitize for xss... <a href="javascript:alert('xss')">test</a> EDIT: removed example page since it wasn't clear to me that access to link mean

You guys should sanitize for xss... <a href="javascript:alert('xss')">test</a> EDIT: removed example page since it wasn't clear to me that access to link means you can edit