[TYPO3-core] RFC: Add external RemoveXSS library to TYPO3

[Patrick Broens]

Dmitry Dulepov [typo3] wrote:
> Martin Kutschker wrote:
>> But as the code doesn't seem to be "versioned" we can simply inline 
>> the code into t3lib_div directly. And - of course - we must use the 
>> code. Eg we could change the constructor of pi_base to use it or add a 
>> method that checks the piVars, etc. Mybe we can protect the BE as well.
> 
> I like more if it goes to contrib/. +1 for the rest.
> 
+1 for the way it is. Keep the code itself in contrib.

Patrick