This is what I have done on my shoutbox: find the first appearance of the following code:

serendipity_db_query($sql);

Then replace it with the following:

# The following codes were added by Wenjun Lu
# on the 6th of May, 2005. Purpose is to filter
# out messages that contain bad words.
if ...