Manual:Messages API#Output modes and escaping has some advice, might be good to copy/merge in here?
Topic on Talk:Security checklist for developers
Appearance
Manual:Messages API#Output modes and escaping has some advice, might be good to copy/merge in here?