概要
This skill provides comprehensive guidance for sanitizing HTML content to prevent Cross-Site Scripting (XSS) without altering the document's original formatting or layout. It offers detailed strategies for identifying dangerous script tags, event handlers, and malicious CSS properties, helping developers choose between surgical regex-based removal and parser-based filtering. By following these security best practices and verification checklists, you can build robust filters that handle obfuscated payloads and legacy browser exploits while ensuring clean content remains byte-for-byte identical to the source.
