Defeating script injection attacks with browser-enforced embedded policies
JavaScript instrumentation for browser security