3 ms·

"lots of apps catch script tags but miss event attributes." This is a good point. I know at least one really popular web app that does this.