add support for crossorigin attribute on script tags