You don't open yourself up to XSS, see my comment above: https://news.ycombinator.com/item?id=20773188