JANUS: Synthesizing Cross-Layer Defenses Against Web Deserialization Attacks