allow javascript insertion