For security reasons a token should placed in a hidden field of a form. You only support a link.
- Autopublish for the plugins
- If the editor is in text mode, the versions won't get pasted
- The preview doesn't match the correct output, I think, the template-paths and css is needed, so a direct output isn't possible. The preview function of tinymce run in the same problem. If you use an iframe, mootools-ajax and some know how, you can open the joomla frontsite-article in a absolute positioned div.
Keep going on,