title: Should I sanitize the input for android
body: <p>The user will type a text and then a button will have that text as value.Can the user do XSS injection? Should I sanitize the input? If yes how?</p>
  
  <p>This is a little bit what would happen: <a href="http://jsfiddle.net/5q895/" rel="nofollow">http://jsfiddle.net/5q895/</a></p>
  
  <pre><code>&lt;input type="text" id="asd" /&gt;
  &lt;input type="submit" id="zxc" onclick="qwe()" /&gt;
  &lt;script&gt;
  function qwe()
  {
      document.getElementById("zxc").value=document.getElementById("asd").value;
  }
  &lt;/script&gt;
  </code></pre>
  
  <p>(It is for android, I used JS to illustrate)</p>