Unescaped HTML in shared-note list
Unescaped HTML in repository list
Unescaped HTML in source list