As long as the file you are displaying doesn't have any forms you should be pretty safe.
I have a couple of these and just to be on the safe side I start echoing right after <body> and stop echoing just before </body>
If you have a form or a textarea that could caues serious problems.
