Hi Kyle,
I have a solution for you!
It’s not elegant, but if you aren’t afraid to open a PHP file, I can get you fixed up.
Open /system/expressionengine/modules/safecracker/libraries/safecracker_lib.php and find line 2569
Change this:
$this->skip_xss_fieldtypes = array();
to this:
$this->skip_xss_fieldtypes = array(’textarea');
Now, this comes with some caveats, so beware. This opens any textarea in a SafeCracker form to allow pretty much anything to be posted. What you are doing here is taking textarea field types out of the XSS Clean process, so it won’t be sanitized to make sure it has originated with your site.
Since this is a controlled access form anyway, it shouldn’t be a problem for you, but I wanted you to be aware of the impact.
If you have any questions, just ask!
Cheers,