Architectural Principles for Safe Web Programs
Charles Reis, Steven D. Gribble, and Henry M. Levy (University of Washington)