An Empirical Study of Privacy-Violating Information Flows in JavaScript Web Applications http://cseweb.ucsd.edu/~d1jang/papers/ccs10.pdf