Handling of HTML editors

My gut feeling is that CMS is injecting code to your application, which means most signatures or character checking are useless ... i would suggest to deactivate such checks for urls used to post by creating a wildcard parameter for them, and removing sig and meta characters.