script injection test 2