The JavaScript found on Freedom Host sites, however, was designed to attack only Version 17 of the extended support release, which was included in a browser bundle offered by the Tor Project.