title: Preventing Vulnerabilities in ckeditor?
body: <ol>
  <li><p>I want prevent users from uploading shell (exploit) on my host. I remember fckeditor, had few bugs that allowed a hacker uploads files on server. Is there a similar issue with ckeditor?</p></li>
  <li><p>How trust to users files and make sure they aren’t fake files, for example: a hacker can edit inside a pdf files -> file have pdf extension and type but has malicious code.</p></li>
  <li><p>Is using htmlencode,htmldecode enough for XSS attack?</p></li>
  </ol>