support javascript injection