The example you provided does not appear to be a valid reference for this issue because the source does not contain anything with contenteditable="false" parameter.  The problem is that when source contains contenteditable="false" that a user can go to the HTML view, perform a CTRL+A and delete everything including anything that is supposed to be protected by contenteditable="false"