XSnare : application-specific, cross-site scripting protection