Safely handling WYSIWYG content

[stromb0li]

What is the best practice for saving and retrieving content from the editor (wyswiyg form control) to prevent XSS attacks?

Is the recommendation to santize upon save?
XF::app()->stringFormatter()->sanitizeHtml($content);
Safely handling WYSIWYG content

free plugins
minecraft paid for free
mcmarket
mc-market
free minecraft paid plugins
free minecraft plugins
spigotmc
SpigotMC
aac free
ewg free
Minecraft Premium Plugins
ewg free download
litebans free
epicworldgenerator free
free schematics
leaked schematics minecraft
schematics
schematics leaked
schematics free
minecraft schematics free
paid minecraft schematics free
paid minecraft schematics for free
free cracked plugins
free cracked minecraft plugins
plugins
featherboard download
featherboard plugin download
antiaura download
xenforo leaked
xenforo for free
xenforo addons