Information Flow Control for Event Handling and the DOM in Web Browsers