BetterAuth: web authentication revisited
Blueprint: Robust Prevention of Cross-site Scripting Attacks for Existing Browsers