A measurement study of insecure javascript practices on the web
Defeating script injection attacks with browser-enforced embedded policies