Update notes for submitted changes

* Encode non-HTML characters in links and ids