script injected in irctc page