A frontend XSS firewall