I\'ve got the common situation where I\'ve got user input that uses a subset of HTML (input with tinyMCE). I need to have some server-side protection against XSS attacks an
Microsoft has an open-source library to protect against XSS: AntiXSS.