Sort:  

Yep, there is a whitelist for embeds. But just left a comment on this post because in this case it's a bit different. We cannot allow <script> tag in the posts.