Client-Side Protection Against DOM-Based XSS Done Right [pdf]blackhat.com2 pointsgodelmachine8 years ago