Eradicating DNS Rebinding with the Extended Same Origin Policy