Vetting browser extensions for security vulnerabilities with VEX
The Essence of JavaScript