Fixed URL and figure validation and prevented extra entities from tidy.
Added htmlspecialchars function to our JS. Eliminated all entity and TAB-key handling from CKEditor.