Adding in some basic html sanitization for the notes.  Still vulnerable to a select number of xss attacks but this will help