[Ask HN] Do you think this code will *really* work?
pastebin.comYou're still allowing all tags that can load flash, applets, custom plugins for media playback.
oh sure! I totally miss that, I will clean it for iframes, objects, applets and videos. Thanks