Please critique my webapp
axod: You really need to sanitize that input. It's really simple to inject arbitrary html into your page... best case it messes up the output and just looks bad. Worst case it exposes something etc etcNot to mention things like this:http://taggl.net/search/?tag=--%3E%3Cscript%3Ealert(0)%3C%2Fscript%3E%3C!--http://taggl.net/search/?tag=%2F%22It doesn't look like you're santizing at all, so someone could have fun with your backend/sql/etc etc