test script injection