removing data- injection