To disable the script inside location blocks or server blocks for specific urls / domains all you can do so with the following. These locations you apply this to will have no protection from the ...

Base64 encoding often wraps executable or script content into text blocks that fit in image tags (data/svg+xml;base64,…) or document fields. Decoders in browsers or apps can restore the original ...