Data-confined HTML5 Applications
Towards a Formal Foundation of Web Security