Firewall blocking submission from plugin (in development)

I have a coder helping me put together a plugin that will be offered in the WP plugin directory.

It includes a textarea where the user (admin) will paste some javascript code, including the <script> tags.

In testing, WordFence flags this as a potential threat. It can be whitelisted, but I would prefer users not run into the firewall at all.

The coder resolved this issue by encoding the content in the textarea using jquery upon submission. But that causes a weird view of the encoded content in the text area before the page refreshes.

Does WordFence have any documentation or suggestions on what is required to avoid running into the firewall when the submission includes the <script> tags?

Thanks for any help!

Chris