And still no html support damnit

It's all about security. The incoming text from visitors is the most exposed surface area of this application, so that input has to be scrubbed clean. I do this by HTMLEncoding the whole string.

If I turn off html encoding, it would allow tags like <p> and <b> to be used, but then I would have to write my own handler for things like <script> and other nasties. And if I filter out "<script>," somebody will post "<script >" or something equally clever. It's an exercise I don't care to get into. The system will hyperlink any properly formed http URL's automatically, and that should be enough for anybody but the hardcores like yourself.