Allowing Java script will make anyone steel other users cookies/session easily.

We will try to have some option for CSS shortly.