vulnerability: removed unused function argument in js script