We were using the markdown renderer with the `filter_html` option set to false, so we weren't removing hypothetical `<script>` tags.
We were using the markdown renderer with the `filter_html` option set to false, so we weren't removing hypothetical `<script>` tags.