Is there a possibility that e.toString() can have use injected html?  Some sort of manipulation of the input such that it throws an error with user content (should I add a TODO here?)