The "pre_kses" filter is used to change what types of scripts/tags are allowed in WordPress content. [1] then strips any tags/scripts/etc that are registered as not allowed.
This filter is passed three arguments,
function filter_function_name( $string, $allowed_html, $allowed_protocols ) { return $string; } add_filter( 'pre_kses', 'filter_function_name', 10, 3 );
See: Data Validation article for an in-depth discussion of input and output sanitization.