Preventing XSS attacks on user submitted HTML content in PHP, the eBay way?

It's easy when you've got an army of programmers and a war chest full of money.

I spent some time with it, and I was able to alert(document. Cookie) -- something that their blacklists clearly try to prevent -- by building on a years-old exploit listed here.

I cant really gove you an answer,but what I can give you is a way to a solution, that is you have to find the anglde that you relate to or peaks your interest. A good paper is one that people get drawn into because it reaches them ln some way.As for me WW11 to me, I think of the holocaust and the effect it had on the survivors, their families and those who stood by and did nothing until it was too late.