Since this comes from an external source, it should be scrubbed to prevent XSS.