protect against script tags in log lines