I am using a contentEditable div that allows users to edit the body HTML and then post it directly to site using an AJAX request. Naturally, I have to do some security checks o
Did you think about security risk from and objects?
I'd use strip_tags() for stripping html tags
strip_tags()