title: How can I allow my user to insert HTML code, without risks? (not only technical risks)
body: <p>I developed a web application, that permits my users to manage some aspects of a web site dynamically (yes, some kind of cms) in LAMP environment (debian, apache, php, mysql)</p>
  
  <p>Well, for example, they create a news in their private area on my server, then this is published on their website via a cURL request (or by ajax).</p>
  
  <p>The news is created with an WYSIWYG editor (fck at moment, probably tinyMCE in the next future).</p>
  
  <p>So, i can't disallow the html tags, but how can i be safe?
  What kind of tags i MUST delete (javascripts?)?
  That in meaning to be server-safe.. but how to be 'legally' safe?
  If an user use my application to make xss, can i be have some legal troubles?</p>