an XSS, CSRF IDS on Browser , code with Javascript