Oooooof. Rails (which I think they may be using) makes sanitization fairly easy.