js currentUrl
security module: generate_signature