The user input is not sanitised and since it's a demo it's open for everyone to edit. I'd suggest maybe sanitising user input on the server end so that script

The user input is not sanitised and since it's a demo it's open for everyone to edit. I'd suggest maybe sanitising user input on the server end so that script tags don't get through.