can you be more precise? maybe give an example!? is that not easy to filter out? does this not need an easy to filter java script command?
As far as I understand, a filter should be restrictive. Convert any < brackets into < (ampersand lt), equally all > brackets into >
Only some specific commands would be allowed. If < is followed by H1 as in <H1>, then it is ok and will be retained. If necessary, even filter the commands through regular expressions, so only certain parameters would be allowed.
Of course, there are some tricky points. For example, we have to make sure that html does not creep in during post editing!
