Thanks.  That is what it seemed like.  Any chance that the StripScriptTagsFromInput functionality will be expanded?  I was excited to see it, but it isn't terribly helpful if it doesn't completely block javascript.