I have basic XSS protection from the main area, but didn't realize I had to protect the CSS field. Thank you for that. This is why I love getting feedback from

I have basic XSS protection from the main area, but didn't realize I had to protect the CSS field. Thank you for that. This is why I love getting feedback from HN: most of the time you will find something I'd overlooked. edit: and yes, I'm using Discount (RDiscount, actually, it's running on Ruby)