FONT tags in advertiser injection, I understand. We do some mangling to avoid that, but you're right. It doesn't kill everything.

I'm wondering what kind of stupid web tricks you're talking about that go against XHTML validation, though. Care to share a horror story?