JavaScript : DOS attack possible