Internet
Go Ahead Visit Those Websites, You Can't Get Hurt...Can You? James S. Rothfuss, Jeffrey W. Parrett
When Java Was One: Threats From Hostile Byte Code Mark D. Ladue
Stupid JavaScript Security Tricks Walter Cooke, CISSP