The problem is incorporating third party content that is neither screened nor sanitized.  The proportion doesn&#x27;t matter as much as the fact that there is nothing stopping attacks.  They only get cleaned up afterwards.  You don&#x27;t expose your users to attack without warning.<p>I think very few websites allow one person to embed arbitrary scripts that will be shown to another person.