Scriptless attacks: stealing the pie without touching the sill
Noncespaces: Using Randomization to Enforce Information Flow Tracking and Thwart Cross-Site Scripting Attacks