try searching for script tags in ajax data