Michael, in working on DOM-based XSS filtering, have you seen/looked at this? http://blog.astrumfutura.com/archives/430-html-Sanitisation-Benchmarking-With-Wibble-ZF-Proposal.html -chuck