A measurement study of insecure javascript practices on the web
Zozzle: Low-overhead Mostly Static JavaScript Malware Detection