As long as these are only "<" and ">" (and not the double quote itself) characters and you're using them in context like , you're safe (while for you would be vulnerable of course). That may simplify your situation, but for anything more use one of other posted solutions.