[Wikitech-l] The right way to inject user-supplied JavaScript?