Форумы / Cotonti / Development / Опрос: A global switch to HTML parsing

Koradhil:

---

You can still send a manual POST containing malicious HTML (through a custom HTTP request), so Javascript can still be bypassed.

But if anybody tries disabling Javascript to edit directly HTML code NO TEXTAREA AT ALL would appear with that method, no? Or I'm misunderstanding?
So, how can anybody try to send HTML code to database if there's no a textarea?

Koradhil:

---

As far as I know, there is no option to insert new rows or columns in the middle of an existing table (or even add rows at the end) in FCK / CKeditor.

You're wrong, try here yourself:
http://ckeditor.com/demo
Every part of table, rows, cells is configurable clicking with the right button of your mouse. You can add, delete, merge, separate, change colors etc of rows, columns, cells...