The web browser is ever increasing in its importance to many organizations. Far from its origin as an application for fetching and rendering HTML, today’s web browser offers an expansive attack surface to exploit. All the major browsers now include full-featured runtime engines for a variety of interpreted scripting languages, including the popular JavaScript. The web experience now depends more than ever on the ability of the browser to dynamically interpret JavaScript on the client.