SECURITY VULNERABILITY

[epicreviews]

Comments have a huge vulnerability

<script language="javascript">alert('Security');</script>

This set off a problem when someone was testing for me.
anything that uses javascript does it
htmlentities would protect it

This totally screwed up my categories with just a test.

[ryan]

Only users that have the unfiltered_html capability can do this.