addt'l clarification on generic script injection