HTML5 web applications security playground