Check if you get something in the error.log when you move out of the source edit.AEM applies the principle of filtering (Cross-site scripting) all user-supplied content upon output.Refer: https://docs.mktossl.com/docs/experience-manager-65/developing/introduction/security.html?lang=en