Making Client-Safe Websites