You want to avoid having: <img src="javascript:..."> and such. For this, I'd recommend making a function say sanitize() which filters out unwanted ...
確定! 回上一頁