This is very shocking, I hope you fixed this and you filter out javascript.
Well I had a guy who put up a post with javascript that opens an infinite number of browser windows. Crashed many many computers, even Linux gets into trouble with this one.
And sure the boad users were pissed at the admins who did not immediately find and delete all his posts.
I cannot figure a legitimate use for javascript in a board post