prevent script tag redirect pattern.
version 1.1