Remove potential script elements in ajax response