Content output by the database auto-linking filter required additional sanitizing to prevent an XSS risk.