http://www.aggreddit.com/?r=%22%3C%2Fa%3E+%3Cscript%3Ealert%...
OP, you might want to check out HTML Purifier (if you're using PHP) and htmlentities().
Reply on news.ycombinator.com