FWIW, in some places such as description, we already handle this by stripping all HTML tags. I'm not sure if we should render or sanitize HTML here, because maybe we shouldn't trust this data.