3 ms·

Normally, we escape output as well. These fields were (foolishly) considered "trusted" and allowed to be rendered without escaping.