Disable script tag execution

@10w042

We had some mildly undesirable behavior where script tags like `<script>alert('hi')` were being executed when they were pasted into the email box. A merge would be great!

I merged in 0.1.0 and am directing the PR to your 0.1.0 branch.  w00t