Cross-Site Scripting (XSS)


The following blog post should not cause any arbitrary JavaScript to run.

Blog Post

Bob's HTML post (published)

Published: true
This is Bob's blog post using HTML and an image: