There still are some html escape bug: if submmit some JS code , these code will stop /write or /edit from redirecting to '/' or '/edit' page.