The codex says you can't add javascript in the post content
https://codex.wordpress.org/Using_Javascript
But I can. I've turned off all plugins and changed to twentysixteen theme, but to no avail - I can still add javascript, via the post content, and have it run on the frontend. I don't want anyone to be able to add javascript through the post content (apart from oembed etc.) for security reasons.
Has anyone experienced this or have any ideas to help?
Thanks