You shouldn't forget that blacklisting is not enough. Whitelisting is usually as important (specially for displaying rss full of html), and there are far fewer

You shouldn't forget that blacklisting is not enough. Whitelisting is usually as important (specially for displaying rss full of html), and there are far fewer open implementations.