fix js injection based on head or body

also: bump version number