Browser protection against cross-site request forgery. - Wim Maes; Thomas Heyman; Lieven Desmet; Wouter Joosen (SecuCode@CCS, 2009)