Added notes about escaping HTML and errors
Lazy commit