Disables XSS protection. This is bad but because validator's xss() method is removing the style attribute from <img> elements, there is no fun with the WYSIWYG editor anymore. Will need a different (maybe local) implementation for XSS parsing here.
XSS issue fixed; styling; last author not shown in edit mode anymore.