100 sub-content area of XSS and HTML intrusion solution;

Front Desk Submission Content:
Generally through the Baidu UE or kind editor;
These editors automatically escape some < > tags in the view area; Submits a tagged HTML string;
In order to maintain consistency, the background can not be escaped again, and directly into the storage;
Illegal users can directly post a section of script+html code, without JS;

This can cause XSS attacks;

Xss:script this good solution, escaped and