Platform review changes

- I would add a comma between the adjectives, i.e., "does not contain unsanitized, user-supplied strings ..."
- Maybe add backticks to `html_enc` to indicate that it pertains to code?
- Are there other sources of user-supplied strings? If not, change "e.g." to "i.e.".