https://news.fyself.com/new-javascript-injection-playbook/