Href exploit fixing : the bugfree edition