dfw4ever·5년 전·discussYou should sanitize the messages on the server side, not the client. It's possible to inject images/scripts/links on the page.