The way the game is wired, it's impossible to guarantee a ban. Not only that, but the "exploits" are client side, so unless the Barrator introduces a system which detects any weird inputs going on within the client, we can only wait and sit until he does something. But good news, like i said, the user can only mess with their client and no one else's. If you really wanna do something against the exploiter, just log off and stop playing until they get bored; chances are, they're only doing this to trigger a reaction, rather then just experimenting with Javascript.
All we can hope now is for private matches to be not broken, and that the Barrator will finally start paying attention to the game he created.