Protecting users by confining JavaScript with COWL
An evaluation of the google chrome extension security architecture