Yeah, it's an edge case. However, we sanitise it in the admin UI as well, so I'll do it here too.