If you do that I most certainly want to never visit your forum.
Allowing posts to have inserted JavaScript / iframe code is an extremely bad idea.
It opens up the possibility of all kinds of problems ranging from cookie theft to click-jacking to spreading malware and who knows what else.
If you want content from those three specific domains, please, allow only content from those three specific domains and not “*”