include javascript in a more safe style
add tests