Fixing script injection hole