add avoid script tag validation