Railo Application Settings - Script Protect
Yesterday I was having a strange issue trying to create a new blog entry running BlogCFC & Railo. I was trying to create an entry that embedded a .swf file and that code uses the object & embed tags. Every time that I would post the form the tags would be replaced with a invalidTag and this was throwing me off a bit. A little searching and I found out that this was script protect working its magic. This in both ColdFusion & Railo is a server setting that you can overwrite on a per application basis. In my case I just have the one application running so I am going to make the change the admin. If you fire up your web administrator and go to application on the left you will see a script protect setting. This was set to all which protects all scopes. Making the simple change below fixed my issue.

