Talk:HTML Injection

I don't agree on the Related Controls, the XSS prevention cheat sheet does not solve the examples given where e.g. content is given in parameters etc. Validation might work somewhat, but examples would be solved by refactoring and doing indirect references to content.