|
From a programming perspective, it's much easier to strip out all HTML with a single regular expression, and then parse your own non-html code than it would be to selectively strip out HTML code.
So I suspect it's done for simplicity's sake on the coding side of things, not only because the programmers are lazy, but also because simpler code = less chance of possible security holes (in this case the danger would be tricking the selective HTML stripper into allowing cross-site scripting attacks).
|