id	summary	reporter	owner	description	type	status	priority	milestone	component	version	resolution	keywords	cc
10089	<script> tag is not filtered out	Wiktor Walc	Piotrek Koszuliński	"Thanks to #9829 CKEditor now creates HTML content which contains only allowed HTML tags. 

The problem is that the `<script>` tag can be still inserted in source mode and is not properly removed, even though there isn't any rule that would allow it (in `editor.filter.allowedContent`). So it looks like this tag has been somehow forgotten.

I believe we should:
 a) remove the `<script>` tag completely by default, leaving it to the developer to specify it in `config.extraAllowedContent`

 OR

 b) eventually specify it in `config.extraAllowedContent` by default. However if `config.extraAllowedContent` is set to an empty string, the tag should be still removed.

Also in case of `<script>` tag we should simply remove the tag if its forbidden, without leaving the inner content in the editor."	Bug	closed	Normal	CKEditor 4.1 RC	General		fixed