Firewalls May Weaken Websites Against Attacks