A general and systematic approach to web mashup security