We have an installation of WordPress (3.9) where TinyMCE is not removing script tags (in posts etc). This isn't correct, I believe?!
I think a developer that worked on the project possibly changed something when trying to sort something out, but I can't see where at the moment - what are the obvious places to look?
Update: This seems to happen on a fresh WP3.9 install. In the text tab of the post editor I can enter script tags, which persist unless I switch to the visual editor and save. I don't think that this is correct, I think that WP is supposed to strip script tags out...or did I miss something?