This is a problem that should be solved with a scalpel, not a battle ax. One of the things that makes this site fun is its flexability and creativity. We should not remove all of javascript just because it can be used to read cookies, we should just remove document.cookie. What we need is something that checks a post for validity and returns to the user with the post and the message, "This post is invalid, it uses forbidden blah blah blah" or something.