fix issue: js scripts being executed when inputting/pasting