+ Enable default RequestValidation for form values ( all other content type was already being validated ) and update the HTMLEditor and CodeEditor controls to HTML-encode their content prior to posting back to server ( Fixes #532 ).