Properly escape script tag