Linked Presentation: JAW: Studying Client-side CSRF with Hybrid Property Graphs and Declarative Traversals