title: XSS prevention. Handling <script is enough?
body: <p>I was wondering if checking for and removing <code>"&lt;script"</code> from text entry fields would be enough to stop javascript code injection attacks?</p>