Add basic script injection prevention