DUE BEFORE THE FINAL HITS YOUR DESK!

Make a chat program using Javascript and Flask.

Out of 10.  Stop when you get to 9

+2 All HTML stuff is shown, not executed.  No XSS attacks.  <br> does not skip a line, but shows "<", "b", "r", ">"

+1 can refuse some specific IP number
+2 can refuse some list of IP numbers

+1 Reject a naughty word (helicopter)
+2 Can reject a list of naughty words (helicopter, rotor, blade)
+3 Can reject a list of naughty words it reads from a file or database

+2 Server saves conversations to a file or database
+3 That and the server reloads the conversations on restart.

+1 Your clients have nick names
+2 And the nicknames are a different font/color/underline
+3 And the nicknames have avatars.

+1 Only clients that know the password can post
+2 And the passwords are stored in a file/database

+2 All traffic is sent encrypted 

+5 First person to do this without polling (and show me first).