title: Lightweight and secure way to prevent XSS
body: <p>Every text field in this current project is just normal plane text without ubb or html tags.
  However it must be unicode so an array with characters which are supported isn't optimal i guess.</p>
  
  <p>I know there are a lot of dedicated classes for xss detection, however don't all xss include these 2 characters:</p>
  
  <p>The char &lt;</p>
  
  <pre><code>&lt;
  %3C
  &amp;lt
  &amp;#60;
  &amp;60;
  &amp;#x3C;
  PA==
  </code></pre>
  
  <p>The char ;</p>
  
  <pre><code>;
  %3B
  &amp;#x3B;
  &amp;#59
  Ow==
  &amp;59;
  </code></pre>
  
  <p>If i check all user input (get, post, cookie) for the characters in the codeblocks above then everything should be 100% safe?
  The project isn't running on mysql, its using cassandra so mysql injection shouldn't be a problem.</p>
  
  <p>I'm sure i'm forgetting something but i don't know what...
  Or is it really so easy to build 100% safe apps when the userinput is plane text?</p>
  
  <p>Edit:
  List are both a little longer, found one for the first char here:
  <a href="http://ha.ckers.org/xss.html" rel="nofollow">http://ha.ckers.org/xss.html</a></p>
  
  <pre><code> &lt;
      %3C
      &amp;lt
      &amp;lt;
      &amp;LT
      &amp;LT;
      &amp;#60
      &amp;#060
      &amp;#0060
      &amp;#00060
      &amp;#000060
      &amp;#0000060
      &amp;#60;
      &amp;#060;
      &amp;#0060;
      &amp;#00060;
      &amp;#000060;
      &amp;#0000060;
      &amp;#x3c
      &amp;#x03c
      &amp;#x003c
      &amp;#x0003c
      &amp;#x00003c
      &amp;#x000003c
      &amp;#x3c;
      &amp;#x03c;
      &amp;#x003c;
      &amp;#x0003c;
      &amp;#x00003c;
      &amp;#x000003c;
      &amp;#X3c
      &amp;#X03c
      &amp;#X003c
      &amp;#X0003c
      &amp;#X00003c
      &amp;#X000003c
      &amp;#X3c;
      &amp;#X03c;
      &amp;#X003c;
      &amp;#X0003c;
      &amp;#X00003c;
      &amp;#X000003c;
      &amp;#x3C
      &amp;#x03C
      &amp;#x003C
      &amp;#x0003C
      &amp;#x00003C
      &amp;#x000003C
      &amp;#x3C;
      &amp;#x03C;
      &amp;#x003C;
      &amp;#x0003C;
      &amp;#x00003C;
      &amp;#x000003C;
      &amp;#X3C
      &amp;#X03C
      &amp;#X003C
      &amp;#X0003C
      &amp;#X00003C
      &amp;#X000003C
      &amp;#X3C;
      &amp;#X03C;
      &amp;#X003C;
      &amp;#X0003C;
      &amp;#X00003C;
      &amp;#X000003C;
      \x3c
      \x3C
      \u003c
      \u003C
  </code></pre>