To prevent users from saving possibly malicious HTML and JavaScript in
comments and stories, at blogger.de, University of Erlangen and twoday.net,
the user input is sanitized. Maybe that (or something similar) could be
integrated in Antville?

phoque describing his changes (antville 1.1):
http://groups.google.com/group/antville-dev/browse_thread/thread/79db3c73f3e9d62
8

The settings at blogger.de (in app.properties):
<code># allowedTags: List of tags/attributes that are allowed for a story,
resp.
# for a comment. All other tags/attributes are being removed. This
# should guarantee that no users can insert malicious (script) code, esp.
# the XMLHttpRequest-Object. By adding '%[.]' to this list, it is possible
# to allow macros to be inserted.
allowedTagsForStory   = textmodule, hypertextmodule, legacymodule,
editmodule, listmodule, targetmodule, presentationmodule, tablemodule,
imagemodule, objectmodule, custommodule, iframemodule, %[.]
allowedTagsForComment = textmodule, hypertextmodule, legacymodule,
editmodule, presentationmodule, %[.], imagemodule

# allowedTagsForStory = a[name|href|target|title|hreflang], strong, b,
em, i, strike, p[align], ol, ul, li, br, nobr, wbr,
img[src|border|alt|title|width|height|align], blockquote[cite],
div[align], pre, code, center, cite,
table[border|cellpadding|cellspacing|width|height|bgcolor],
th[width|height|align|valign|colspan|rowspan],
tr[width|height|align|valign|colspan|rowspan],
td[width|height|align|valign|colspan|rowspan], q[cite], samp, kbd,
var, dfn, acronym, abbr, ins, del, hr[size|width|align],
font[size|color|face], basefont[size|color|face], big, small, tt, sub,
sup, s, blink
# allowedTagsForComment = a[name|href|target|title|hreflang], strong,
b, em, i, strike, p[align], ol, ul, li, br, nobr, wbr,
img[src|border|alt|title|width|height|align], blockquote[cite],
div[align], pre, code, center, cite, q[cite], samp, kbd, var, dfn,
acronym, abbr, ins, del, font[size|color|face],
basefont[size|color|face], big, small, tt, sub, sup, s, blink</code>

Well, <i>blink</i> should have been omitted.