Can you email nick@codecombat.com to help us reproduce this? It sounds like a form is getting submitted somehow, which shouldn't happen. I haven't been able to reproduce in Firefox, Chrome, or Safari yet.

Sorry about this–we take security seriously.