[rwth-security] A Method for Web Security Policies