I'm worried about security.

What if the text contains evil code? For example, code that can be executed with '<script>code here</script>'