If you're including the input text be sure to run it through several fairly severe cleansings. You may want to strip any javascript, forms, ssi, applets and other goodies not desired. In fact if you're just looking for text perhaps stripping all tag might help. 
$textin =~ s/<[^>]*>//sg;   ## strip normal tags
$textin =~ s/^[^>]*>//sg;   ## strip sneaky left over stuff
$textin =~ s/<[^<]*$//sg;   ## strip sneaky left over stuff

[download]
That should get rid of most attacks to your script.
Of course you can always just strip forms, ssi, etc. and leave normal tags alone. It all depends on how severe you feel you need to be -- or can afford.

Claude

In reply to Re: Stripping Trailingbr's by Xxaxx
in thread Stripping Trailingbr's by Keef

Title:
Use:  <p> text here (a paragraph) </p>
and:  <code> code here </code>
to format your post, it's "PerlMonks-approved HTML":


  • Posts are HTML formatted. Put <p> </p> tags around your paragraphs. Put <code> </code> tags around your code and data!
  • Titles consisting of a single word are discouraged, and in most cases are disallowed outright.
  • Read Where should I post X? if you're not absolutely sure you're posting in the right place.
  • Please read these before you post! —
  • Posts may use any of the Perl Monks Approved HTML tags:
    a, abbr, b, big, blockquote, br, caption, center, col, colgroup, dd, del, details, div, dl, dt, em, font, h1, h2, h3, h4, h5, h6, hr, i, ins, li, ol, p, pre, readmore, small, span, spoiler, strike, strong, sub, summary, sup, table, tbody, td, tfoot, th, thead, tr, tt, u, ul, wbr
  • You may need to use entities for some characters, as follows. (Exception: Within code tags, you can put the characters literally.)
            For:     Use:
    & &amp;
    < &lt;
    > &gt;
    [ &#91;
    ] &#93;
  • Link using PerlMonks shortcuts! What shortcuts can I use for linking?
  • See Writeup Formatting Tips and other pages linked from there for more info.