Add some attribute validation for url email and not containing <script>