sentence: the definition gradually expanded to encompass other modes of code injection , including persistent and non-javascript vectors ( including activex , java , vbscript , flash , or even html scripts ) , causing some confusion to newcomers to the field of information security .