added javascript injection protection