No need to revert r30078: HTML-formatting the data is enough. Attacks like api.php...