protect error page tracking from xss attacks