contentEditable is inherently an HTML editor that uses `<br>` when the user hits enter, etc. Our unit tests add `<br>`s since they accurately represent what user input will look like in a contentEditable. I think the two options are: go back to using textarea and find a new way to do attachments, or find a way to make innerHTML safe. Thoughts?