What are the security ramifications of allowing a user insert their own JavaScript into our web application?
<p>I have a requirement to allow a user to paste a JavaScript block into our servers hand have it added to this users webpage under head(users domain would be customName.oursite.com).  What are the security ramifications of this type of feature?</p>
