diff --git a/README.md b/README.md
index 1330f16..7c0c7e1 100644
--- a/README.md
+++ b/README.md
@@ -32,6 +32,7 @@ Run the tests locally (against development environment):
 
 ## TODOs
 
+1. `xml_escape` on INSERT (needed for the Markdown stuff later)
 1. Rules/about page
 1. CSS
 1. "All new posts flagged" mode (require approval for new posts)