HTML :: StripScripts still safe to remove modern exploits?

Question

I need a way in Perl to break naughty things like XSS, image interjection and work.

I found HTML :: StripScripts , but it has not been updated for two years, and I am not aware of all the new feats.

Is it safe?

What other markup languages ​​(in Perl) would you use?

Answer 1

HTML :: StripScripts is a whitelist and can use a tree-based parser and should be as safe as a whitelist.

Answer 2

XSS is an extensive topic, and adventures appear every day.

/​​ .

( ) . html/ , . <b>, <i>

Defang / XSS lib perl cpan

OWASP XSS Cheat Sheet

CAL9000, , / XSS