I'll have to jump in here too, and say this - it isn't getting executed in the main window, and it doesn't get executed in an IFRAME - your virus checker is popping because it sees the text, and is not smart enough to parse html to figure out whether it's actually being executed or not.
Cheers,
Backov
------------------
AVSBlitz - Build AVS Sites Faster and Better