Major sites running unauthenticated JavaScript on their payment pages | Heykuki News