Precisely why I am now providing recent referrers in plaintext. They didn't figure it out when I nofollowed them in v5. I'm hoping that by adding this dynamic content that I can increase my SEO.
Of course by displaying recent search queries, Googlebot (and the like) sees me as having added the content containing that query. Therefore they update their records to show I have updated content with that term they saught. Then my ranking goes up and they click more, and the pattern just repeats. In v5 I made the mistake of not showing this as part of the default content, as Google is less likely to 'click' on an AccordionPane and therefore sees the updated content less frequently. No longer

I dunno, everyone seems to be doing black on white. I find it hurts my eyes - like going outside in the sun when I've been in a dark apartment all morning. Of course I keep it dark inside and that must have something to do with it...
Edit: Per XSS injection, which I just noticed you wrote about... All user inputs such as referrer are parameterized on their trip to SQL via LINQ, and HtmlEncoded on their way out.