> Who in their right mind would take user input and put it in an HTML attribute? Hacker news for example :) HN allows you to enter a color code in your prefere

> Who in their right mind would take user input and put it in an HTML attribute? Hacker news for example :) HN allows you to enter a color code in your preferences, which is inserted as a bgcolor attribute on a html table.