Assessing the threat of web worker distributed attacks
Defeating script injection attacks with browser-enforced embedded policies