I&#x27;m not sure how who he is or what he does is at all relevant here.<p>Especially considering that he makes pretty obvious factual errors, e.g:<p>&gt;[CVE-2015-7578&#x2F;79] Possible XSS vulnerability in rails-html-sanitizer: You&#x27;re safe if you use a single page application that properly encode for you. Stripping tags isn&#x27;t the best way anyway to filter XSS, so if you&#x27;re encoding, you&#x27;re good.<p>If you don&#x27;t want any HTML you aren&#x27;t supposed to be using rails-html-sanitizer, it&#x27;s specifically for scenarios where you can&#x27;t do that.