...and now I've found an eval statement in this module's javascript. That's it. Prepare the napalm: this code is going to burn.