got a nonce-value in script tag. Improved safe body check