Implementing Javascript Injection security