I\'m writing a servlet-based application in which I need to provide a messaging system. I\'m in a rush, so I choose CKEditor to provide editing capabilities, and I currently
If none of the ready-made options seem like enough, there is an excellent series of articles on XSS and attack prevention at Google Code. It should provide plenty of information to work with, if you end up going down that path.