remove script and style in text-editor's setup_input

frappe/public/js/frappe/form/control.js

@@ -1273,6 +1273,7 @@ frappe.ui.form.ControlTextEditor = frappe.ui.form.ControlCode.extend({
 		}
 	},
 	_set_input: function(value) {
+		value = frappe.utils.remove_script_and_style(value);
 		this.editor.set_input(value);
 		this.md_editor.val(value);
 		this.last_value = value;