removes `<script>` from comments to prevent CDATA violation; fixes #89