POST Body validation failed: "script" is not allowed