OK, but now write one that doesn't block words like "sextant" or "bombast." I remember using a BBS in the '80s that had a filter like this; it was really hard discussing the Kennedy ass-ass-ination.

Also, if it is only Javascript validation, a malicious user can just turn off Javascript to get around it, or maybe just tamper with the HTTP after the browser is done with it.