allow all attributes for div and script tags