This is an experimental framework for automatic addition of anti-cross-site-request-forgery nonces to web applications via client side DOM manipulation