Why is javascript allowed in my post content?
If you have the unfiltered_html capability then you can use JS. Admins and editors have this capability by default. Personally I use a plugin for fine control of my users’ capabilities, but you can make this change easily in code: $role = get_role( ‘administrator’ ); $role->remove_cap( ‘unfiltered_html’ ); $role = get_role( ‘editor’ ); $role->remove_cap( ‘unfiltered_html’ … Read more