Fix the URL in attack.js