You don't have control over the server-side code, but it will let you inject <script> tags into the content? That seems a bit weird.