emergency HTML/JS injection fix (Baystation12#6195 and Baystation12#6196).