title: JavaScript DOM XSS Injection validation
body: <p>Is this regular expression enough to catch all cross site scripting attempts when embedding HTML into the DOM. eg: Such as with document.write()</p>
  
  <pre><code>(javascript:|&lt;\s*script.*?\s*&gt;)
  </code></pre>
  
  <p>It is referenced in this document from modsecurity.com 
  <a href="http://www.modsecurity.org/documentation/Ajax_Fingerprinting_and_Filtering_with_ModSecurity_2.0.pdf" rel="nofollow noreferrer">http://www.modsecurity.org/documentation/Ajax_Fingerprinting_and_Filtering_with_ModSecurity_2.0.pdf</a></p>
  
  <p>Would it catch all &lt;\s<em>script.</em>?\s*> variants in UTF-8 for instance? </p>