Protecting Browsers from Cross-Origin HTML-parsed-as-CSS Attacks [pdf]websec.sv.cmu.edu2 pointsbensummers16 years ago