Measurement and detection of security properties of client-side web applications