WebKit attacks on mobile applications