Securing the Web: Clients, servers, and 3rd-party content