[et-al]

Thanks for the upvote, but a bigger thanks for coming back to answer my question so thoroughly. :)

> If you're using an HTML templater, it might sanitize/encode the HTML for you, but only if it knows that it's supposed to do that and that it's not part of your normal HTML.

Yeah this was my larger concern. I'm never blindly appending user-submitted input into the DOM, but doing it through a templater like Handlebars.