kses stops evil scripts