How many one-off patches will be needed since the malicious website will just change something else as soon as the fix is deployed? And rinse and repeat.