MDL-25836 fixed stripped src attribute from script tag