Provably Sound Browser-Based Enforcement of Web Session Integrity
Towards a Formal Foundation of Web Security