Five Tricks for Improving JavaScript Security