title: Why can't we have some AntiXss Literal html tag
body: <p>Nowadays I am learning about web security, XSS, etc. As XSS basically targets a client-agent (web browser) by injecting some malicious code that is executed by the web browser as it was inserted by an  authenticated user. Now the question is <strong>Why can't we have a tag in html that just shows literals and prevents the execution of anything inside it?</strong></p>
  
  <p>Something like:</p>
  
  <pre><code>&lt;!-- The code below will not be executed and just treated as literal content by a web browser --&gt;
  
  &lt;ltrl&gt;
  &lt;script type="text/javascript"&gt;alert('You have been xssed');&lt;/script&gt;
  &lt;/ltrl&gt;
  </code></pre>
  
  <p>So if I would have something like this in html then it were shown as</p>
  
  <pre><code>&lt;script type="text/javascript"&gt;alert('You have been xssed');&lt;/script&gt;
  </code></pre>
  
  <p>in web browser.</p>