title: Sanitizing HTML in submitted form data
body: <p>Is there a generic &quot;form sanitizer&quot; that I can use to ensure all html/scripting is stripped off the submitted form? <code>form.clean()</code> doesn't seem to do any of that - html tags are all still in <code>cleaned_data</code>. Or actually doing this all manually (and override the <code>clean()</code> method for the form) is my only option?</p>