I've noticed that HTML tags are removed instead of being encoded. For example, the Signer opted out with a message:
Can't sign as there is a 
In the admin panel, there is a message:
Can't sign as there is a  tag visible.
Which is wrong as it doesn't contain all passed data. The tag should be encoded. The same happens with the emailBody content.