Noncespaces: Using randomization to defeat cross-site scripting attacks
Blueprint: Robust Prevention of Cross-site Scripting Attacks for Existing Browsers