結果 : client potential code injection javascript fix