Web Forms :: Best Way To Handle Having User Submit Long Text

I have a web application where users are permitted to submit their resumes. When the form is submitted, the data is inserted into a new record in an SQL table. One of the fields in the form allows them to copy and paste their entire resume text into a TextBox control, which is inside the InsertItemTemplate of a FormView. This particular control is bound to a column in the SQL table that's of datatype nvarchar(MAX). It works, but there are no line breaks and when viewed the resume is just one long continuous block of text. How can I change this so that line breaks are preserved? Do I need to use something like a "cute editor" control? And finally, how do I protect against malicious code? The insert query is parameterized, and the FormView refers to an insert method in a TableAdapter in my dataset.