Created an experimental WYSIWYG editor prototype. All changes done in editor are reflected in textarea and vice-versa. No formatting buttons yet.
Tags must be entered inside textarea instead. Tags that are not allowed are excluded upon post rendeding. XSS still can be triggeded while editing text but not when post loads in feed.
Tags must be entered inside textarea instead. Tags that are not allowed are excluded upon post rendeding. XSS still can be triggeded while editing text but not when post loads in feed.