[TYPO3-core] RFC: Add external RemoveXSS library to TYPO3

[Dmitry Dulepov [typo3]]

Martin Kutschker wrote:
> But as the code doesn't seem to be "versioned" we can simply inline the 
> code into t3lib_div directly. And - of course - we must use the code. Eg 
> we could change the constructor of pi_base to use it or add a method 
> that checks the piVars, etc. Mybe we can protect the BE as well.

I like more if it goes to contrib/. +1 for the rest.

-- 
Dmitry Dulepov
TYPO3 freelancer / TYPO3 core team member
Web: http://typo3bloke.net/
Skype: callto:liels_bugs