So, I have a web 2.0 site I'm building with a lot of user input but as with any web 2.0 site, I'm gonna have trouble with spam. Easiest way in my case as far as I'm aware is to block any HTML tags. Users do not need formatting and I'll use for fixing spacing.

But I don't think there's any blocking tags, xmb sounds perfect but been depreceated since the 90s so pretty dumb.

Otherwise, what kind of filtering would I need? I see stack overflow allows 'basic' HTML... How do I do it? Block certain tags or allow certain tags, etc. As I said, users shouldn't need any tags.

Edit: using django