Maybe we can let javascript be like images with an extra step. First, the user must be level 5 or above. Second, the user must upload the javascript (a .js file). Third, some group of people (like we have for the Q&A) view the javascript and ok it. Finaly, the javascript is embeded in the home node when the page is rendered. Since the javascript is stored on the server side, the javascript can't be changed be the user without submitting the javascript again.