I would like to implement guest book panel and I have two security question.
1) Need I captcha when there will be only ajax submit link? I think that robots can't submit form thru javascript. 2) New comments will users write in Rich Text Editor ( http://visural-wicket-examples.appspot.com/app/rich-text-editor Reduced Functionality Example) so I must setEscapeModelStrings(false) on the label which shows comments. Is this big security issue?