new abstracted META inject code, disallowInlineScripts() friendly