Trevor Jim Nikhil Swamy Michael Hicks Defeating script injection attacks with browser-enforced embedded policies. 601-610 2007 conf/www/2007 WWW http://doi.acm.org/10.1145/1242572.1242654 db/conf/www/www2007.html#JimSH07