Noncespaces: Using randomization to defeat cross-site scripting attacks
Defeating script injection attacks with browser-enforced embedded policies