excuses> I capture the input ... HTML, no matter what's the source of the data. After all, in some cases characters like <, &, etc are legitimate parts of your data. I've never worked with Flask ...