title: Using safe filter in Django for rich text fields
body: <p>I am using <a href="http://en.wikipedia.org/wiki/TinyMCE" rel="noreferrer">TinyMCE</a> editor for textarea fileds in <a href="http://en.wikipedia.org/wiki/Django_%28web_framework%29" rel="noreferrer">Django</a> forms.</p>
  
  <p>Now, in order to display the rich text back to the user, I am forced to use the "safe" filter in Django templates so that HTML rich text can be displayed on the browser.</p>
  
  <p>Suppose JavaScript is disabled on the user's browser, TinyMCE won't load and the user could pass <code>&lt;script&gt;</code> or other <a href="http://en.wikipedia.org/wiki/Cross-site_scripting" rel="noreferrer">XSS</a> tags from such a textarea field. Such HTML won't be safe to display back to the User.</p>
  
  <p>How do I take care of such unsafe HTML Text that doesn't come from TinyMCE?</p>