How to disallow certain strings in signatures?
In drupal, whichever field you are taking input as, you need to make sure that only plain text is inserted by the user. This way, drupal will run check_plain function to the text added, and no links, xss attacks can be made.