If it's federally legal, would that mean that all states have to have it legal or can states still choose that? Just wondering, not that I actually want this.

<script type="text/javascript">alert("remember when scripting attacks worked?");</script>