Add FIXME about data escaping needed