ESORICS (2019): Mime Artist: Bypassing Whitelisting for the Web with JavaScript Mimicry Attacks