it's impossible to block injection 100% when the input and outer instructions are unified together.