DISA wants to keep cyber attackers locked in the web browser