Add notes about properly escaping output.