Wiki comments required additional sanitizing and access restrictions to prevent a stored XSS risk and potential IDOR risk.