HTML Purifier is an HTML filter that will remove all malicious code (better known as XSS) with a thoroughly audited, secure yet permissive whitelist and will also make sure your documents are standards compliant.