Logged In: NO

In /js/richedit.js

Remove the reference to "d." and replace
with "el.frameWindow.document"

eg:

el.frameWindow.document.designMode = "On";
el.frameWindow.document.open();
el.frameWindow.document.write(el.value);
el.frameWindow.document.close();