And just to thwart it further, it has to be valid XHTML, so closing tags are not optional and attribute values have to be quoted.

only half smiley, but it'd make validating against a DTD of permitted items fairly easy.

-- Randal L. Schwartz, Perl hacker