[mrki444]

The site doesn't save or store any data. When a visitor fills out the form the details are sent to my email. There is no database on the site storing data.

I know but where would you save it if you must?

[Fergal]

Id the site got bigger and I needed to start saving data I would probably add a DataBase to it, but it doesn't need that for the moment.

[mrki444]

I just tried your website with this two submits.

1. //

2. <script>
document.getElementById("msg").innerText = "Hello, World!";
</script>

For first maybe you should add minimum number of words.
For second test does it contain some malicios code. If you allow script tags somebody can insert it into post, like cookie.

[Fergal]

Thank you mrki444, that's helpful and useful feedback. When you submit something on the site, it does not go to a DB, it is inserted as the subject of an email and emailed to me. For that reason I don't think there is a real risk of SQL injection or anything like that.

I do agree with you on minimum word or character count, I may implement that in the future. Thanks again for your helpful feedback.