Tested JS injection