An analysis of browser domain-isolation bugs and a light-weight transparent defense mechanism