On the source and target systems I noticed some text is being stripped from the description fields. For example i cannot paste an url because the http or https part will be stripped from it. Even if this character sequence is part of a bigger string it is filtered out.
It will also delete everything between <> characters, even if there is a full sentence between them.
I guess if I search a little more that I will find more examples, but these I've experienced first hand. There should be no reason for this behavior, so please let me use the characters I want in the description field.
If malicious userinput is your concern, than you could just store the description HtmlEncoded. This way we can have what we want and the app is as secure as ever.