I've been paranoid about literally any xss for this reason. Outbox has me even more paranoid.