disable leading slashes on script injection