Busting Frame Busting: a Study of Clickjacking Vulnerabilities on Popular Sites