Cross-site scripting in jspdf

It's possible to use nested script tags in order to bypass the filtering regex...