But I do wonder if there's a way to abuse this by, for instance, having \n inside of an XML tag, and after HTML encoding has happened, Replace("\n", "<br />") ends the tag in a different place, and suddenly we have XSS?