acv
thinks
that the plurk input parser is a series of regexp filters applied at the display of data. In the wrong order too.
acv
says
that the corollaries include the fact that not all display instances may be XSS safe and that minor changes could alter display of text.
