From: Fredrik Jagenheim <jagenheim@...>
Date: 2004-08-11T20:31:40+09:00
Subject: RedCloth, restricting input?

Hi,

I'm writing a message board, where I'd like to use RedCloth for the text input.

However, I don't trust my users not to abuse headers, attributes and
general HTML.

Getting rid of headers and attributes should be easy, just substitute
the tags before parsing it through RedCloth. But doing this with HTML
seems a bit heavy handed. The best would be if I could get RedCloth to
escape HTML the way it does for <pre> tags.

Any ideas if that's possible, or have a much better idea? :)

//F