HTML · Security · Mid-Level · Scenario
How do you safely embed user-generated HTML?
Short Interview Answer
Sanitize with a vetted library allowlist; never regex-strip tags alone.
Detailed Explanation
Consider markdown → sanitized HTML. Escape by default; rich text is an explicit privilege.