started playing with a Jinja extension to deny dynamic stuff within script tags