Third-party content: the weak link in the chain