I recall at some point in time reading something that recommended not giving all users the ability to post or PM using html because of a security threat. Is that currently an issue?