Thanks.

Stripping out all the carriage returns is what I do now.

Regarding the security, yes that is wise. I am limiting html access to a specific group of known posters that are sort of topic facilitators (and less then 10 total).