Information-Flow Security for a Core of JavaScript
Cross Site Scripting Prevention with Dynamic Data Tainting and Static Analysis