This has been asked before but I need 100% clarity on this issue as it\'s very important for me to get it right.
The situation: A message system on a website. The
Please check the OWASP XSS Prevention Cheat Sheet. It will explain how to avoid XSS for different contexts. Htmlentities should do the job when between tags.