XSS issue due to allowing too much

[LiamDawe]

Hi, please be aware that since you're allowing anything to be added to links and images, you've opened up anyone with CKEditor to possible XSS issues if the content used with CKEditor is shown publicly.

Is there a reason why you're setting links and images, and allowing them to add anything? Doesn't seem like the plugin actually needs to allow them.