Describir: Defending against Cross-Site Scripting Attacks.