Fix security hole allowing Format to be changed during edit.