Browser security, cross-site request forgery, cross-site scripting, SQL injection, clickjacking attacks, countermeasures