I made a comment about this below, but is this intended to be injected and whitelisted? or is it a code block?