Translations:Cross-site scripting/15/en

You can skip validation, but you can never skip escaping. Escape everything.