escape <script> tags
provide a way to get the div for a recaptcha other than through heist