title: How do I make a JavaScript whitelist to prevent XSS?
body: <p>I only have a few jQuery scripts running on my practice site that handle UI dynamics. What I also do is store the HTML from a web page into a database and "echo" that HTML on the client side.  I was wondering, then, could I make a whitelist of only the JavaScript that I want to run?</p>