Close XSS gap

[dustin-H]

Kick user when trying to set content of something with <script or onload or something like that

[dustin-H]

hmm,... thats not so easy... move to Milestone Version 1
The problem is not so bad because you can only attack people on the same file