Tighten check for inline JavaScript

Closes #60.