HTML sanitizer in javascript

Question

I am working on a HTML parser which receives a input from user and produce HTML document in tag. Now to avoid XSS attacks I need a simple HTML sanitizing script which filter out all java-script elements and allow only HTML component.

Answer 1

There is not way you can properly sanitize user input on client side, because it can all be bypassed, users can simply remove event handlers, delete javascripts. the only way to properly sanitize user input is with client-side programming language.