Robust Security Policies a Must in Web World