This is not the forum module, it is the core logic which changed that strips out the content as the core security filter now sees it as an attempt to hack a post.

Do we have any idea when this will be fixed?

I understand your frustration Drew, but this was introduced to me by surprise as well. The problem is in the DNN core security filter, and cannot be changed unless forum posts are not run across this. If you don't run them across this (In PostToDatabase method with Forum_PostEdit.ascx.vb) you are opening yourself up to javascript hacks. All I can recommend is to lobby the core to change this, as I am doing it as well.