Maybe a comment as to what's happening here? I'm guessing it's:
- 1. Change &lt;;script&gt;; to <script> and likewise for <iframe> (and all other tags??)
- 2. Strip out <script> and <iframe> tags and their contents.