comment <script> label from qq.com for security concern