But then you open yourself up to XSS which is a lot harder to defend against.