js injection fix