If that's your concern then going for a HTML sanitizer is the better route. The language/framework you're using probably already has one.