html elements set to inject javascript