Here is a little PHP code for stripping special html, javascript and whitespace from user input.
I recommend copying a large html document into the text field and submiting the form.
The script will strip the dangerous characters from the input, and will try to
convert some common HTML entities to their text equivalent.
Enter Anything, like the source code from this page :