XSS Cleaning

[eluser]Pascal Kriete[/eluser]
He has a little text field at the bottom where you can test. He's obviously not doing it on purpose - but he is doing it. If I use a xss cleaner I want it to be tested to exhaustion and beyond. That clearly wasn't done here.

Although the unwanted comma stripping does save him from a few vectors that would otherwise go through.

For regular expression testing, I've found this firefox plugin quite useful.