Totally agree with devshorts. Even if a line break is considered as rich text or malicious it is obviously not correct to render an uppercase <BR> tag instead.