Harmful characters entered in textarea?

[dakota81]

I've got a coldfusion app I'm building and am wondering what characters I should be looking for to remove or replace from textarea text. Obviously any '<' or '>' should be replaced, and probably quotation marks. Anything else I should be aware of?

 

[dwarfthrower]

I know that Yahoo mail replaces any reference to the word &quot;Java&quot; with the word &quot;Espresso&quot;, in an attempt to prevent malicious code being sent by email. Perhaps look at replacing any JavaScript or VBScript keywords with innefective alternates &quot;function&quot; becomes &quot;function_&quot; etc.

[sub]Never be afraid to share your dreams with the world.
There's nothing the world loves more than the taste of really sweet dreams.[/sub]