non-executable-script
tag-in-description