Comment by wdiamond

"<"+"/script>", its a matter of parsing not value