making code injection optional