# useHead script `children` vulnerable to XSS