Tags parsed and rendered as HTML

Tags that have been input are parsed and rendered as HTML, rather than being escaped. As entering valid HTML tags causes the tags to be marked up. Entering broken tags causes erratic formatting. And entering scripts causes them to be executed.

Examples:

<h1>test h1</h1>
<p
</input>
<img src=x onerror=alert(1)>

Result: screen shot 2013-09-25 at 11 45 17 am

rauchg / TextboxList

Tags parsed and rendered as HTML #16