Browsing: How to Build a Safe API