My only issue like this was that automated porn spammers kept making forum posts with links to their sites in them. I solved that problem by adding a "quarantine" field to the forum form, and having a WQS agent set the field to "True" if the string "http:" was found. Then I changed the view selection properties to exclude any documents with that field set to true. Finally, I set up a new view that ONLY showed documents flagged as having links, and set up a way for reviewers to clear the quarantine field if the document was legitimate. So documents without links showed up right away, legitimate documents showed up after a reviewer could look them over, and spam got flushed without the public seeing it at all.
I did something similar for documents with script tags in them, but in practice, no one has ever attempted to include script in a forum post.
My only issue like this was that automated porn spammers kept making forum posts with links to their sites in them. I solved that problem by adding a "quarantine" field to the forum form, and having a WQS agent set the field to "True" if the string "http:" was found. Then I changed the view selection properties to exclude any documents with that field set to true. Finally, I set up a new view that ONLY showed documents flagged as having links, and set up a way for reviewers to clear the quarantine field if the document was legitimate. So documents without links showed up right away, legitimate documents showed up after a reviewer could look them over, and spam got flushed without the public seeing it at all.
I did something similar for documents with script tags in them, but in practice, no one has ever attempted to include script in a forum post.