security patch for site tracking JS data