JavaScript : External information leak