No more XSS. Node server included at no additional charge.

@sararob Give it a try. Run node server and the go to localhost:3000. Try to add an XSS like <style>body { color: #f00; }, and it should strip those tags out.