Board Thread:Code Review/@comment-4356266-20151008134915/@comment-4356266-20151011061206

Oops! This is what I got from html escaping (through mw.html.escape).

Now that we're talking about html sanitization, I wanna know how big of an issue it is amongst all the scripts here at dev. Definitely someone else have a working way of doing it. If it's that big of an issue, there probably would have already been a Google Caja (which I heard provides a near-universal way of doing this) import in the dev tools section.