Version 1.2.0 of zope.html has just been released. It includes the security fix release of FCKEditor (2.6.4.1) which addresses http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-2265. -- Benji York Senior Software Engineer Zope Corporation