Is there a way that the Upload buttons used for inserting images, flash, PDFs, etc. be implemented differently such that CE users wouldn't be led to believe that the editor is trying to ClickJack? See noscript's definition of the ClickJacking problem and their solution for Firefox here: http://noscript.net/faq#qa7_1   And here's a video ...