Following advice from #7.
I'm not sure if I understood @guido.gunther right, but I think it's going to be easier to merge security features as they come instead of doing a huge overhaul. Thus this patch only secures virtual-keyboard.
Due to an influx of spam, we have had to impose restrictions on new accounts. Please see this wiki page for instructions on how to get full permissions. Sorry for the inconvenience.
Following advice from #7.
I'm not sure if I understood @guido.gunther right, but I think it's going to be easier to merge security features as they come instead of doing a huge overhaul. Thus this patch only secures virtual-keyboard.