Add a very basic JS injection attack document & test
Add getElementsByTagName to DomUtils.
Remove dangerous <script/> and <style/> tags before inserting XML into the dom.
<script/> tags are executed when inserted into the DOM. This is unwanted, so they are are removed before the XML is inserted into the DOM.
In addition, <style/> elements can be used to execute code, so they are removed too.
Remove event handler attributes: attributes that have no namespace and a name starting with on.
Add tests to check if dangerous input is loaded without executing javascript.
Harmonize licenses.
Fix whitespace.
Adapt test to new Async API.
Merge pull request #402 from vandenoever/noscript

Remove <script/> tags before inserting XML into the dom.