Reducing Web Attack Surface: Mitigating Social Engineering And Code Injection Threats‬ ‭