結果 : how to prevent code injection in javascript