JavaScript Framework Security