better pattern for detecting evil scripts in rdfa attributes