Font size in post editing is not validated

[floridsleeves]

In the post editing page, the font size is constrained by front end HTML 'type=number'.

However, this font size can be changed by intercepting the requests. And the resulted HTML will contain the font size making no sense:

<p style="font-size:aaapx">User’s blogs</p>

This may result in data corruption or web injection.