in HTML email notifications, angle brackets in posts were unescaped - including those in code blocks.