Mitigating AJAX HTML5 and client-side vulnerabilities