views:

77

answers:

1

I'm exploring the idea of using contenteditable on a website at visitor comments and at a message board.

As I only wish to accept a white-list of HTML tags and attributes the question of when and how should I validate the entered HTML content comes up.

How would you do it? What cross-browser solutions would you choose to use? What events could be useful?

+1  A: 

HTML Purifier is getting momentum these days.

Sarfraz