Using HTML5 To Make JavaScript (Mostly) Secure