title: Prevent user-entered scripts from running in webpage
body: <p>In my application, there is a comment box. If someone enters a comment like </p>
  
  <blockquote>
    <p><code>&lt;script&gt;alert("hello")&lt;/script&gt;</code></p>
  </blockquote>
  
  <p>then an alert appears when I load that page. </p>
  
  <p>Is there anyway to prevent this?</p>