Input in facts module is now sanitized before doing queries.
Escaped input in quotes module.
More input escaping.