reverse inject script to client side