Be sure to sanitize any source code or templates file that generates HTML, too. It's easy to accidentally leave sensitive data, like server names and addresses, in code comments when rushing out a release. Using static analysis tools and performing code reviews will lesson the likelihood of this happening.