The Problem With Blacklisting
Check out the latest AppSec Consulting blog post from Application Security Consultant, Ryan Borden. He discusses, in some detail, the cross site scripting attacks that he will employ to defeat your blacklist, as well as what you can do to really protect your applications.