I'm certain only Outbrain can answer your question, but a full software audit of all fields is in order. Sadly, field sanitization (and security in general) is

I'm certain only Outbrain can answer your question, but a full software audit of all fields is in order. Sadly, field sanitization (and security in general) is something that is often overlooked in the rush to get software in front of clients. It's like not installing railings on stairways because most of the time you don't need them and you can build the stairs faster without them. Only nowadays, there are a lot of people trying to push you off the stairs.