I remember using this a lot when making a site back in the days where users could change stuff using HTML/CSS. I had to gradually add more regex filters to combat trolls who managed to insert nasty JS. It was great fun and I don't think the trolls realised that they were actually doing me a favor all along.
