title: Handling Rich Text in an MVC application
body: <p>What are the best practices regarding working with rich text in a web application?  I don't want to leave myself vulnerable to script attacks.  Should the data be encoded going into the database and then decoded when displayed back to the user?  Any advice on rich text editor's that handle things like removing script tags or encoding the entered markup?</p>