HTML isn't getting escaped in this example

[chriddyp]

so we see the bold and line breaks instead of <b> and <br/>