Any time I think about HTML sanitization I think about MySpace and how the engineers there never parsed user authored HTML, they just searched for substrings in

Any time I think about HTML sanitization I think about MySpace and how the engineers there never parsed user authored HTML, they just searched for substrings in the input which allowed users to craft some really funky HTML that was valid, but unconventional. Interesting times. Also a good example of how when you work at a company as a developer, not every issue you come across you’ll have time to fix or may even know how to. Tools proliferated years later to help with this sort of thing, but it’s interesting to think after many years that such a common concern had not really been explicitly addressed in standards as far as I know.