SECURITY: Improve css javascript detection