HPP -- What is it, and what types of attacks does it augment? (webappsec.org)