On the Fragility and Limitations of Current Browser-Provided Clickjacking Protection Schemes.