FIX HtmlEditorField not re-checking sanitisation server side