Surviving the Web: A Journey into Web Session Security
JSFlow: tracking information flow in JavaScript and its APIs