Your rich text could be a cross-site scripting vulnerability
Recognize and mitigate SXSS vulnerabilities before they're exploited  By Luke Harrison  This article...
Tags: javascript, webdev, security, privacy