hmm is this supposed to be injected as a valid source file or is it supposed to be a code block? if it is injected, it needs to be whitelisted.