JavaScript: Valid script insert in body