2017-11-28 UTC
# 
csarven Just out of curiosity.. why is all this a security concern for a portion of a document in a particular representation? Doesn't it go without saying that input should be sanitised? The outside of <head> being a security concern seems to imply that people have well-formed/valid documents. They usually don't.