its good cause it is also a possible security risk on the webserver when you allow html coding. They could always just implement a web based html app that will code for you to control what goes in.
...........
Oh I am just being a nerd again. I will stop boring the group :(