HTML标签绕过

[JammyDodger]

This has been mentioned a few times. As it stands, this is the current approach:

@codinghorror

Yes, this is well known, there are many topics on this. Have a search.

It’s WONTFIX because there are as many methods to bypass as there are grains of sand on a beach. We only care about the common and easy ones.