HONEYPOD: protecting web clients from programmers