Abstract: While control-flow integrity (CFI) has been extensively applied to binary programs to ensure correct code execution, its application to web applications remains largely at the research stage ...