test jshijacking