uncovered hidden javascript