prevent script leakage