removed text injection into fields