Why use a whitelist for HTML sanitizing?

Question

I\'ve often wondered -- why use a whitelist as opposed to a blacklist when sanitizing HTML input?

How many sneaky HTML tricks are there to open XSS vulnerabilities?

Answer 1

Even though script tags and frame tags are not allowed, you still can put any tag like this

mouse over this

and many browsers works.