CVE-2020-7691

It’s possible to use <<script>script> in order to go over the filtering regex.