I believe we both agree that adding the tags would add complexity to PM. Where we seem to differ is the amount of complexity added, and whether the added benefit of the new tags outweighs the potential problems. Given that the allowed tags appear to be allowed through a table driven process, adding a few new tags would only increase the complexity marginally. (The difference between a table of ten tags and a table of fifty tags in negligible when the code to parse the table of tags is already present.)

The security implications are a different matter. I can honestly say I did not consider any cross-site scripting problems with the new tags. I would love to hear how the DEL tag could be used to execute code on a computer. My opinion is that the tags proposed above are no more harmful than the CODE, TT, or H3 tags are. An enlightenment would be appreciated.

Hi,

I didn't say there are cross-site scripting issues known right now, but I think in accepting information from 'untrusted' sources, one can't be paranoid enough. My point is that we don't know how harmful any given tag is because we can't be sure there are no bugs in the browser implementations (<insert rant about non open-sourced software here>). And even open-sourced browsers might contain bugs. Given the fact that in the past even simple things like <img>-tags have been exploitable in certain browsers, makes me think one can not be careful enough. Be prepared for the unexpected.

And I also am not totally against adding (some of) these tags (after all I don't have to do the coding), I just wanted these thoughts taken into consideration.