do not display an empty name; also avoid inline scripting