Reining in the web with content security policy
Protecting browser state from web privacy attacks