CMS_HEAD does not escape special chars after saving content. See CMS_TEXT constructor for a fix.
Make sure to test directly after pushing save button and after a fresh load of page without POST-data because these are 2 different cases in code.
Button placement does not change when editing CMS_HEAD. Textarea did overlap the saving button in Google Chrome at a first glance.