Alhambra: a system for creating, enforcing, and testing browser security policies