Scriptless attacks: stealing the pie without touching the sill
An empirical study of privacy-violating information flows in JavaScript web applications