escapes script tag for example