Ticket #4708: 4708.patch

_source/core/config.js

@@ -282 +282 @@
          * @example
          * config.baseFloatZIndex = 2000
          */
-        baseFloatZIndex : 10000
+        baseFloatZIndex : 10000,
 
+        /**
+         * Whether escape HTML when editor update original input element.
+         * @type {Boolean}
+         * @default false
+         * @example
+         * config.htmlEncodeOutput = true;
+         */
+        htmlEncodeOutput : false
+
 };
 
 // PACKAGER_RENAME( CKEDITOR.config )

_source/core/editor.js

@@ -650 +650 @@
                         var element = this.element;
                         if ( element && this.elementMode == CKEDITOR.ELEMENT_MODE_REPLACE )
                         {
+                                var data = this.getData();
+
+                                if( this.config.htmlEncodeOutput )
+                                        data = CKEDITOR.tools.htmlEncode( data );
+
                                 if ( element.is( 'textarea' ) )
-                                        element.setValue( this.getData() );
+                                        element.setValue( data );
                                 else
-                                        element.setHtml( this.getData() );
+                                        element.setHtml( data );
                         }
                 }
         });