title: XSS without HTML tags
body: <p>It is possible to do a XSS attack if my input does not allow &lt; and > characters?</p>
  
  <pre><code>Example: I enter &lt;script&gt;alert('this');&lt;/script&gt; text
  </code></pre>
  
  <p>But it if I delete &lt; and > the script is not text:</p>
  
  <pre><code>I enter script alert('this'); script text
  </code></pre>