put everything in an iframe, sanitize html before putting it in

[therealadityashankar]

the real fear here is the usage of your website as a domain for wrongdoing, like while js inside does make my life easy, a thing a potentially evil person could do is make it so that your domain is used to host their nefarious websites