While reading this, it reminded me of interesting paper on javascript privilege separation, what do you think about it?

https://www.usenix.org/conference/usenixsecurity12/privilege...