BROWSING: web app attacks